Silentium Exploits and Proofs of Concept

Showing 5 PoCs on this page

ExploitDB

Fusion SBX 1.2 - Remote Command Execution

ExploitDB exploitPublished 2005-05-20ExploitUnlinked1 file

EDB-1003

Analysisdeepseek-v4-pro:cloud · 2026-07-30

Technical assessment

This is a C program that exploits a remote command execution vulnerability in payload withheld by injecting a PHP function (system, exec, or passthru) into the application's settings via a crafted HTTP POST request.

Backdoor review

No backdoor observed in reviewed code

The provided C source code is a straightforward proof-of-concept exploit for a remote command execution vulnerability in Fusion SBX 1.2. It sends a crafted HTTP POST request to inject PHP code into the application's settings, allowing the attacker to execute arbitrary commands via a GET parameter. The code performs no actions beyond exploiting the stated vulnerability and does not contain any hidden backdoor, credential theft, or other unrelated malicious functionality.

ClassificationExploit

Model confidence100%

AuthenticationUnknown

LanguagesC

Target softwareFusion SBX

Attack typesremote code execution

Evidence & reasoningClassification basis · observed behavior · safety review

Technical evidence

Classification basis and observed behavior

Classification basis

The code actively sends a malicious HTTP request designed to inject and execute arbitrary PHP functions on a remote server, which is the definition of an exploit.

exploits/php/webapps/1003.c:150-164

Requirements

Target must be running a vulnerable version of Fusion SBX (<= 1.2).exploits/php/webapps/1003.c:3
The attacker must know the path to the Fusion SBX installation on the target server.exploits/php/webapps/1003.c:112

Observed behavior

The program constructs and sends an HTTP POST request to the target's admin settings page.exploits/php/webapps/1003.c:150-164
The POST body injects a chosen PHP function (system, exec, or passthru) into the 'maxname2' parameter, which is then used to execute arbitrary commands passed via the 'sile' GET parameter.exploits/php/webapps/1003.c:161-163
After sending the exploit, the program prints instructions for the user to manually trigger the injected code by visiting a URL with a command parameter.exploits/php/webapps/1003.c:86-88

Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Exploit Mechanism: Payload withheldThe exploit injects a PHP function call (system, exec, or passthru) into the application's configuration, enabling remote command execution via the 'sile' GET parameter.exploits/php/webapps/1003.c:150-164
Target Application: Payload withheldThe exploit is specifically designed for this application and version, as stated in the header and usage information.exploits/php/webapps/1003.c:3
Author Contact: Payload withheldAuthor information is provided in the source code header.exploits/php/webapps/1003.c:16-19

Review boundaries

What the analysis did not establish

The analysis is based solely on the provided source code; the exploit was not executed, and its effectiveness against a live target is not verified.
The code references an external vulnerability (SecurityFocus BID 13575) which was not provided for analysis.
The review is based solely on the provided source code. No dynamic analysis or execution was performed.
The exploit's behavior depends on the target server's configuration and the presence of the vulnerability; the code itself does not contain any backdoor.

Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

ExploitDB