CVE-2019-15813 PoC — Sentrifugo 代码问题漏洞

Source

https://github.com/wolf1892/CVE-2019-15813

Associated Vulnerability

Title:Sentrifugo 代码问题漏洞 (CVE-2019-15813)
Description:Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.

Description

This container was made to explain and demonstrate how CVE-2019-15813 (Sentrifugo works)

Readme

# CVE-2019-15813
This container was made to explain and demonstrate how CVE-2019-15813 (Sentrifugo works)

# Sentrifugo V3.2
Sentrifugo is a Human Resource Management System

# How to Install
docker-compose up


# Default crentials to test
----Super Admin----
Username : empp0001
Password : 5faa7bdf3d7af

---Employee----
Username: EMPP123
Password: bygedupub

--Reverse PHP shell--
Extract resume.zip (Archived because windows defender may delete it)
Edit the IP and Port

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!