CVE-2024-21546
CRITICALunisharp/laravel-filemanager < 2.9.1 - Remote Code Execution via Mimetype and File Extension Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-21546. PoCs published by ajdumanhug.
AI-analyzed exploit summary This Python script exploits CVE-2024-21546 in UniSharp Laravel Filemanager by bypassing file upload restrictions to achieve RCE via a reverse shell. It validates session tokens, extracts CSRF tokens, and uploads a malicious PHP payload disguised as a PNG file.
Description
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code.
Exploits (1)
This Python script exploits CVE-2024-21546 in UniSharp Laravel Filemanager by bypassing file upload restrictions to achieve RCE via a reverse shell. It validates session tokens, extracts CSRF tokens, and uploads a malicious PHP payload disguised as a PNG file.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H