Unrestricted-File-Upload — PoC Archivehttps://poc.intelseclab.com/tags/unrestricted-file-upload/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Webkul Medical Prescription Attachment for WooCommerce — Unrestricted File Upload to Web Shell (CVE-2025-29009)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-29009-woocommerce-medical-prescription-file-upload/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-29009-woocommerce-medical-prescription-file-upload/Critical severity (CVSS 10) — web · CVE-2025-29009. Status: Weaponized. Affects: Webkul "Medical Prescription Attachment Plugin for WooCommerce" (WordPress plugin). Tags: wordpress, woocommerce, medical-prescription-attachment, unrestricted-file-upload, webshell, cwe-434, unauthenticated, python.webCriticalwordpresswoocommercemedical-prescription-attachmentunrestricted-file-uploadwebshellcwe-434unauthenticatedpythonSAP NetWeaver Visual Composer Unrestricted File Upload RCE (CVE-2025-31324)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-31324-sap-netweaver-visual-composer-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-31324-sap-netweaver-visual-composer-rce/Critical severity (CVSS 10) — web · CVE-2025-31324. Status: Weaponized. Affects: SAP NetWeaver Application Server (AS) Java — Visual Composer component (VCFRAMEWORK), specifically the Metadata Uploader servlet. Tags: sap-netweaver, visual-composer, metadatauploader, unrestricted-file-upload, java-deserialization, jsp-webshell, rce, cwe-434, cwe-502, python.webCriticalsap-netweavervisual-composermetadatauploaderunrestricted-file-uploadjava-deserializationjsp-webshellrcecwe-434cwe-502pythonMonsta FTP Pre-Authentication Remote Code Execution via Arbitrary File Upload (CVE-2025-34299)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-34299-monsta-ftp-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-34299-monsta-ftp-rce/Critical severity (CVSS 9.8) — network · CVE-2025-34299. Status: Weaponized. Affects: Monsta FTP (web-based FTP manager). Tags: monsta-ftp, rce, pre-auth, unrestricted-file-upload, cwe-434, php, ftp, docker, nuclei, kev.networkCriticalmonsta-ftprcepre-authunrestricted-file-uploadcwe-434phpftpdockernucleikevVisitor Management System 1.0 — Unrestricted File Upload to RCE (CVE-2026-37748)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37748-visitor-management-system-file-upload-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37748-visitor-management-system-file-upload-rce/High severity (CVSS 7.2) — web · CVE-2026-37748. Status: PoC. Affects: Visitor Management System (sanjay1313) 1.0. Tags: php, unrestricted-file-upload, rce, webshell, admin-authenticated, cwe-434.webHighphpunrestricted-file-uploadrcewebshelladmin-authenticatedcwe-434Schema & Structured Data for WP & AMP Unauthenticated Unrestricted File Upload (CVE-2026-9067)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9067-schema-structured-data-file-upload/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-9067-schema-structured-data-file-upload/High severity (CVSS 8.1) — web · CVE-2026-9067. Status: PoC. Affects: Schema & Structured Data for WP & AMP (WordPress plugin, schema-and-structured-data-for-wp). Tags: wordpress, unrestricted-file-upload, cwe-434, ajax, unauthenticated, content-hosting.webHighwordpressunrestricted-file-uploadcwe-434ajaxunauthenticatedcontent-hostingSaleor Stored XSS via Unrestricted File Upload (CVE-2026-23499)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23499-saleor-file-upload-xss/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23499-saleor-file-upload-xss/High severity — web · CVE-2026-23499. Status: PoC. Affects: Saleor (saleor/saleor). Tags: saleor, stored-xss, unrestricted-file-upload, svg-xss, session-hijack, graphql, javascript.webHighsaleorstored-xssunrestricted-file-uploadsvg-xsssession-hijackgraphqljavascriptKrayin CRM — TinyMCE Upload Unrestricted File Upload to RCE (CVE-2026-38526)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-38526-krayin-crm-file-upload-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-38526-krayin-crm-file-upload-rce/Critical severity — web · CVE-2026-38526. Status: Weaponized. Affects: Krayin CRM. Tags: krayin-crm, laravel, unrestricted-file-upload, tinymce, rce, reverse-shell, authenticated.webCriticalkrayin-crmlaravelunrestricted-file-uploadtinymcercereverse-shellauthenticated