Open-AudIT m_devices.php Remote PHP File Upload Vulnerability Exploit

The sub_resource_create function of class M_devices in m_devices.php of Open-AudIT 3.2.2 allows remote authenticated users to upload arbitrary PHP files, allowing the execution of arbitrary php code in the system.
CVE Link
CVE-2020-11942
Exploit Type - Old
Exploits/Remote File Inclusion/Known Vulnerabilities
Exploit Platform
Windows
Linux
Exploit Type
Exploits
Remote File Inclusion
Known Vulnerabilities
Product Name
Impact