How to achieve RCE from file upload vulnerability?

Hello,

let’s suppose that I have a site in which a user can upload images/profile pics. Let’s also assume that I am using an external CDN (like cloudfront) and the file upload has not the proper security measures so that an attacker uploads a malicious php shell.

So my question is: after that the attacker is able to upload the malicious file, how would he be able to trigger the execution of it, considering that it is not hosted in my environment but only in the cdn?

submitted by /u/r3drush
[link] [comments]

Read More >>