Machsol MachPanel File Upload Vulnerability Allowing Web Shell Access

A file upload vulnerability has been identified in Machsol MachPanel version 8.0.32. This vulnerability allows an attacker to upload an ASPx web shell, which can then be used to execute commands on the server.

Impact

Exploitation of this vulnerability allows for unauthorized file uploads, leading to the execution of malicious scripts on the server.

Reproduction

To reproduce this vulnerability, navigate to the 'Submit Ticket' page within the MachPanel control panel. Upload an ASPx web shell as an attachment with the ticket submission. Once the ticket is submitted, access the uploaded file to execute the web shell, which can be used to run commands on the server, such as 'whoami'.