This Metasploit module leverages CVE-2023-38836, an improper sanitization bug in BoidCMS versions 2.0.0 and below. BoidCMS allows the authenticated upload of a php file as media if the file has the GIF header, even if the file is a php file.
4be34ec34fdd2c459e03d46cbe61a319a411480ce0b82004ab5d83d8fcc669d1
BoidCMS versions 2.0.0 and below suffer from a remote shell upload vulnerability.
a68ec76429430287b0271ea1becbf584591cf6f1bf778b41a1cfebd601dc71d3
Online Piggery Management System version 1.0 suffers from a remote shell upload vulnerability.
ee245ecc29f70aa32ae59f177f75712cba8fb94286c05670a180dabc7c7e4783