CVE-2021-47904

This exploit demonstrates an authenticated remote code execution vulnerability in PhreeBooks 5.2.3 via unrestricted file upload in the 'Image Manager' section. It uploads a PHP web shell to execute arbitrary commands on the target system.

This exploit demonstrates a remote command execution vulnerability in PhreeBooks ERP 5.2.3 by uploading a malicious PHP file through the Image Manager due to lack of file extension controls. It authenticates, uploads a reverse shell payload, and executes it to establish a connection to an attacker-controlled server.