CVE-2021-3378

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in FortiLogger via a maliciously crafted POST request. It uploads an ASP payload disguised as an image file and executes it to achieve remote code execution.

This repository contains a functional Metasploit module that exploits an unauthenticated arbitrary file upload vulnerability in FortiLogger 4.4.2.2. The exploit uploads a malicious ASP file via a multipart POST request and executes it to achieve remote code execution.

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in FortiLogger versions < 5.2.0. It uploads a malicious ASP file disguised as an image, then executes it to achieve remote code execution.