CVE-2021-44967
/Practice/Marketing/3-Exploitation/attachments/{99EB707A-8D1F-4A37-BB24-A8ACF12EAA75}.png)
A vulnerability classified as critical has been found in LimeSurvey 5.2.4 (Survey Software). Affected is an unknown code of the component Plugin Handler. The manipulation with an unknown input leads to a unrestricted upload vulnerability. CWE is classifying the issue as CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product’s environment. This is going to have an impact on confidentiality, integrity, and availability.
Exploit
/Practice/Marketing/3-Exploitation/attachments/{158C8584-0889-40DC-8AA7-B9720DBC36DB}.png)
Exploit found online
The exploit requires modifications