The exploit discloses a password disclosure vulnerability via a direct file access and a remote file upload vulnerability due to insufficient file extension validation. It provides a functional HTML form for uploading arbitrary files, bypassing restrictions.
Classification
Working Poc 90%
Attack Type
Info Leak | Rce
Complexity
Trivial
Reliability
Reliable
Target:WorkSimple 1.3.2
No auth needed
Prerequisites:Network access to the target application · File upload module enabled