CVE-2021-41643

This exploit demonstrates an unauthenticated file upload vulnerability in Church Management System 1.0, allowing remote code execution by bypassing image upload filters. It uploads a PHP shell and establishes a webshell for command execution.

This exploit leverages an unauthenticated file upload vulnerability in Church Management System 1.0 to achieve remote code execution (RCE) by uploading a malicious PHP shell. The exploit bypasses image upload filters and provides an interactive webshell for command execution.