Legal Robot · Report #116575
Remote Code Execution (upload)
Validstatus
60upvotes
26 Aug 2016disclosed
Summary
Any file upload was accepted without filter, which led to RCE vulnerability.
It was difficult to find the path tho :P
Strange thing : The shell was executing on firefox only :P , it displayed plain text when opened in chrome.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.