Freelancy 1.0.0 Remote Code Execution

Freelancy version 1.0.0 suffers from a remote code execution vulnerability.

Exploit Details :

# Exploit Title: Freelancy - Freelance Management App v1.0.0 - RCE (Authenticated) Arbitrary File Download 
# Date: 03-01-2019 
# Exploit Author: Ismail Tasdelen
# Vendor Homepage: https://vaaip.com/
# Software Link: https://codecanyon.net/item/freelancy-freelance-project-management-application/25288636
# Software: Freelancy - Freelance Management App
# Product Version: v1.0.0
# Vulernability Type: Code Injection
# Vulenrability: Remote Code Execution ( RCE )
# CVE : CVE-2020-5505

Description :

Freelancy v1.0.0 allows …

1.0.0 application security code code execution hacking rce remote code execution web security