> For the complete documentation index, see [llms.txt](https://kashz.gitbook.io/kashz-jewels/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kashz.gitbook.io/kashz-jewels/services/subrion-cms.md).

# subrion cms

## Interesting Paths

```bash
# login page
/login/

# admin panel
/panel/
```

## File Upload Bypass RCE (authenticated)

v4.2.1

```
# if fails, do it manually
https://www.exploit-db.com/exploits/49876

# shell upload location
/uploads/shell.phar
```