pedrojosenavasperez / cve-2023-5966

Poc from CVE-2023-5966

Advisory

EspoCRM 2.7.4 and earlier is vulnerable to an arbitrary file upload that can lead to code execution in the add extension functionality.

The zip file on this repo upload a web shell to /webshell.php