#arbitrary-file-upload

HackTheBox: Phoenix Writeup

Summary Phoenix is a WordPress box with a long, winding path to root. The short version: an unauthenticated SQL injection in a forum plugin leaks the whole WordPress database, which gives admin creden