The exploit demonstrates an arbitrary file upload vulnerability in CMS Lokomedia 1.5 via the TinyMCPUK file manager component. Attackers can upload malicious files (e.g., shells) to the server by accessing specific URLs, bypassing file upload restrictions.
Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:CMS Lokomedia 1.5
No auth needed
Prerequisites:Access to the TinyMCPUK file manager interface