CVE-2003-1247

This exploit targets a stack-based buffer overflow in H-Sphere Webshell's CGI.C component, allowing remote code execution via a crafted HTTP request. It binds a root shell to a specified port by leveraging predictable return addresses and environment variables.

This exploit targets a stack-based buffer overflow in H-Sphere Webshell 2.4 (CVE-2003-1247) via a maliciously crafted 'CONTENT_TYPE' environment variable. It uses a bruteforce approach to guess the return address and buffer size, ultimately executing arbitrary shellcode to spawn a root shell.