CVE-2022-44384

This exploit demonstrates an authenticated arbitrary file upload vulnerability in rConfig v3.9.6, leading to remote code execution. It bypasses file upload restrictions by uploading a malicious PHP file disguised as an image, then executes arbitrary commands via a crafted GET request.

This Metasploit module exploits an arbitrary file upload vulnerability in rConfig's vendors.crud.php to achieve remote code execution. It authenticates with admin credentials, uploads a malicious PHP file, and triggers it via a GET request.