CVE-2024-44871

This exploit demonstrates an arbitrary file upload vulnerability in MoziloCMS 3.0, allowing an authenticated attacker to upload a malicious .JPG file containing PHP code and rename it to .PHP for remote code execution.

This repository contains a functional exploit for CVE-2024-44871, an authenticated RCE vulnerability in MoziloCMS <= 3.0.1. The exploit uploads a PHP web shell disguised as a JPG file, renames it to a PHP file, and executes system commands via the uploaded shell.