cve/2019/CVE-2019-12744.md

CVE-2019-12744

Description

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a different vulnerability than CVE-2018-12940.

POC

Reference

• http://packetstormsecurity.com/files/153383/SeedDMS-Remote-Command-Execution.html
• http://packetstormsecurity.com/files/153383/SeedDMS-Remote-Command-Execution.html
• http://packetstormsecurity.com/files/163283/Seeddms-5.1.10-Remote-Command-Execution.html
• http://packetstormsecurity.com/files/163283/Seeddms-5.1.10-Remote-Command-Execution.html

Github

• https://github.com/nobodyatall648/CVE-2019-12744