CVE-2021-44673

HIGH

Croogo 3.0.2 - Remote Code Execution via Admin File Manager Attachments Upload

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-44673. PoCs published by Deha Berkin Bir.

AI-analyzed exploit summary This exploit demonstrates an authenticated file upload vulnerability in Croogo 3.0.2, allowing an attacker to upload and execute a malicious PHP script. The PoC includes a sample PHP script that executes a system command and a detailed HTTP request for uploading the file.

Description

A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.

Exploits (1)

exploitdb WORKING POC
by Deha Berkin Bir · textwebappsphp
https://www.exploit-db.com/exploits/50570

This exploit demonstrates an authenticated file upload vulnerability in Croogo 3.0.2, allowing an attacker to upload and execute a malicious PHP script. The PoC includes a sample PHP script that executes a system command and a detailed HTTP request for uploading the file.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Croogo 3.0.2
Auth required
Prerequisites: Authenticated access to the Croogo admin panel · Access to the 'Attachments' section
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/3erk1n/Vulnerabilities

Scores

CVSS v3 8.8
EPSS 0.0354
EPSS Percentile 88.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-434
Status published
Products (2)
croogo/croogo 3.0.2
croogo/croogo 0Packagist
Published Mar 10, 2022
Tracked Since Feb 18, 2026