CVE-2021-41645

This exploit demonstrates an unauthenticated file upload vulnerability in Budget and Expense Tracker System 1.0, allowing remote code execution by uploading a malicious PHP shell. The exploit bypasses image upload filters and executes arbitrary commands via a webshell.

This PoC exploits an unauthenticated file upload vulnerability in Budget and Expense Tracker System 1.0, allowing RCE via a maliciously crafted PHP file that bypasses image upload filters. It uploads a PHP webshell and provides interactive command execution.