CVEs-PoC/2022/CVE-2022-3552.md

CVE-2022-3552

Description

Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.

POC

Reference

• http://packetstormsecurity.com/files/171542/BoxBilling-4.22.1.5-Remote-Code-Execution.html
• https://huntr.dev/bounties/c6e2973d-386d-4667-9426-10d10828539b

Github

• https://github.com/kabir0x23/CVE-2022-3552
• https://github.com/nomi-sec/PoC-in-GitHub