Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-107579. PoCs published by Lars Morgenroth.
AI-analyzed exploit summary This exploit leverages a time-based filename obfuscation weakness in HelpDeskZ v1.0.2 to achieve unauthenticated remote code execution by brute-forcing the MD5 hash of the uploaded PHP shell filename. The script automates the discovery of the uploaded shell by guessing the server's timestamp.
Description
HelpDeskZ 1.0.2 - Arbitrary File Upload
Exploits (1)
This exploit leverages a time-based filename obfuscation weakness in HelpDeskZ v1.0.2 to achieve unauthenticated remote code execution by brute-forcing the MD5 hash of the uploaded PHP shell filename. The script automates the discovery of the uploaded shell by guessing the server's timestamp.