Exploit for Server-Side Request Forgery in Synapsoft Pdfocus

## https://sploitus.com/exploit?id=5A517C01-18F5-5D56-A94C-0124C2068448
# CVE-2023-23169


POC for CVE-2023-23169 Local File inclusion & Server side request Forgery

## Steps to reproduce :
**Local File Incusion :**
1. ```echo "" > poc.docx```
2. Upload the file in PDFocus services 
3. View/Download file after to triggered POC 


**SSRF** : 
1. ```echo "" > poc.docx```
2. Upload the file in PDFocus services 
3. View/Download file to see  triggered POC 

## Demo : 
![Screenshot 2023-05-01 at 4 20 28 PM](https://user-images.githubusercontent.com/11758455/235442743-e8974e79-5d18-4da1-be28-00812d5e7d38.png)

![demo2](https://user-images.githubusercontent.com/11758455/235441374-07741812-5993-441a-9a6f-697d86b022aa.png)
![demo4](https://user-images.githubusercontent.com/11758455/235441365-93b6ca9d-363e-4bbe-8ec5-31b849bdb2bc.png)


![demo3](https://user-images.githubusercontent.com/11758455/235441393-67758da1-5ba4-41c4-b844-18950bc56d76.png)