Pluck 4.7.7-dev2 – PHP Code Execution
# Exploit Title: Pluck 4.7.7-dev2 – PHP Code Execution # Date: 2024-10-26 # Exploit Author: CodeSecLab # Vendor Homepage: https://github.com/pluck-cms/pluck # Software Link: https://github.com/pluck-cms/pluck # Version: 4.74-dev5 # Tested on: Ubuntu Windows # CVE : CVE-2018-11736 PoC: 1) 1. Log in to the Pluck admin panel.\n 2. Navigate to the ‘Manage Images’ section…


