💣Exploit CVE-2024-11984 - Corporate Training Management System Unrestricted File Upload Remote Code Execution Vulnerability

[Mental_Outlaw]

CVE ID : CVE-2024-11984
Published : Dec. 19, 2024, 4:15 a.m. | 1 day, 14 hours ago
Description : A unrestricted upload of file with dangerous type vulnerability in epaper draft function in Corporate Training Management System before 10.13 allows remote authenticated users to bypass file upload restrictions and perform arbitrary system commands with SYSTEM privilege via a crafted ZIP file.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.