CVEs-PoC/2016/CVE-2016-5661.md

CVE-2016-5661

Description

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.

POC

Reference

• http://www.kb.cert.org/vuls/id/665280
• http://www.kb.cert.org/vuls/id/665280
• http://www.kb.cert.org/vuls/id/JLAD-ABMPVA
• http://www.kb.cert.org/vuls/id/JLAD-ABMPVA

Github

No PoCs found on GitHub currently.