cve/2019/CVE-2019-15813.md

CVE-2019-15813

Description

Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.

POC

Reference

• http://packetstormsecurity.com/files/159712/Sentrifugo-3.2-Shell-Upload-Restriction-Bypass.html
• http://packetstormsecurity.com/files/159712/Sentrifugo-3.2-Shell-Upload-Restriction-Bypass.html
• https://www.exploit-db.com/exploits/47323
• https://www.exploit-db.com/exploits/47323

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Harish4948/CVE_2019_15813-lab
• https://github.com/avi7611/Sentrifugo-vulnerable-docker
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/wolf1892/CVE-2019-15813