CVE-2023-24249

This repository contains a functional exploit script for CVE-2023-24249, an arbitrary file upload vulnerability in laravel-admin v1.8.19. The exploit automates authentication, uploads a PHP reverse shell, and executes it to achieve remote code execution.

This repository contains a functional Python script that exploits CVE-2023-24249, an arbitrary file upload vulnerability in laravel-admin v1.8.19, to upload a PHP web shell. The exploit demonstrates authentication bypass via CSRF token extraction and file upload manipulation.