staz0t/exploits

Exploits for some of the vulnerabilities I have discovered

exploits's Issues

Bolt Config.yml: php is never acceptable

Hello staz0t.
The file "SA20200324_boltcms_csrf_to_rce.html" can't work
=> "var editedconfigfile = configfile.replace(extensionsline[0], "accept_file_types: "+extensionsline[1]+", php ]");"

Bolt Config.yml:
Define the file types (extensions to be exact) that are acceptable for upload in either 'file' fields or through the 'files' screen. Note that certain file-types are never acceptable, even if they are in this list. These types are never allowed: sh, asp, cgi, php, php3, ph3, php4, ph4, php5, ph5, phtm, phtml