ok.ru · Report #666716
[insideok.ru] Remote Command Execution via file upload.
Validstatus
criticalseverity
98upvotes
20 Sept 2019disclosed
Summary
Incorrect configuration of the insideok.ru web server allowed PHP execution in the directory with user-generated files, which could be used for RCE.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.