Filechucker filter bypass Proof Of Concept
CVE-2019-7216 In filechuckercgi version 509 and filechucker_prefscgi version 499e-free-e02 there is a filter bypass, upon upload, that can lead to remote code execution providing that the user uploads a malicious file The bypass occurs when filechucker attempts to filter out the file extension and test against filechucker_prefs configuration of non-acceptable extensions: $