CVE-2021-44967

This exploit demonstrates an authenticated RCE in LimeSurvey 5.2.4 by uploading a malicious plugin via the plugin manager, then activating it to trigger a reverse shell. It chains CSRF token retrieval, authentication, plugin upload, installation, and activation.

This is a functional exploit for CVE-2021-44967, an authenticated RCE vulnerability in LimeSurvey 5.2.x. It leverages plugin upload functionality to deploy a reverse shell.

This exploit leverages an authenticated RCE vulnerability in LimeSurvey 5.2.4 by uploading a malicious plugin containing a PHP reverse shell. The script automates login, plugin upload, installation, activation, and execution to achieve remote command execution.

This is a functional exploit for CVE-2021-44967, which allows authenticated users to upload a malicious PHP plugin to LimeSurvey, leading to remote code execution via a reverse shell. The script automates authentication, plugin upload, activation, and payload delivery.