writeups.xyz / Chain The Bugs to Pwn an Organisation ( LFI + Unrestricted File Upload = Remote Code Execution )

Submitter : c2a

Date: 18 September 2018

Bounty : undisclosed

Vulnerabilities :

• LFI
• Unrestricted File Upload
• RCE

Programs :

• Undisclosed

Authors :

• Armaan Pathan (@Armaancrockroax)

Link :
https://medium.com/@armaanpathan/chain-the-bugs-to-pwn-an-organisation-lfi-unrestricted-file-upload-remote-code-execution-93dfa78ecce