8x8 · Report #418308
[CRITICAL] Remote code execution on http://axa.dxi.eu
Validstatus
criticalseverity
8upvotes
9 Jun 2020disclosed
Summary
The application allowed for upload of a file with PHP extension that when loaded on the server would evaluate embedded php source.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.