CVE-2024-31777

This exploit leverages an unrestricted file upload vulnerability in GUnet OpenEclass 3.15 via the 'certbadge.php' endpoint, allowing an authenticated attacker to upload a malicious PHP file and achieve remote code execution.

This repository contains a functional exploit for CVE-2024-31777, which leverages an unrestricted file upload vulnerability in GUnet OpenEclass to achieve remote code execution. The exploit authenticates as an admin, uploads a malicious PHP payload via a ZIP file, and executes arbitrary commands.