CVE-2005-0511

This Metasploit module exploits a PHP code execution vulnerability in vBulletin (CVE-2005-0511) by injecting arbitrary commands via the 'template' parameter in misc.php when the 'Add Template Name in HTML Comments' option is enabled.

This exploit demonstrates a remote code execution (RCE) vulnerability in vBulletin 3.0.1 via template injection in the 'misc.php' script. The PoC uses PHP's string interpolation to execute arbitrary commands (e.g., 'id' or 'phpinfo()') by manipulating the 'template' parameter.

This Metasploit module exploits a PHP code execution vulnerability in vBulletin's misc.php when the 'Add Template Name in HTML Comments' option is enabled. It injects arbitrary commands via the 'template' parameter, leveraging PHP's variable interpolation to execute payloads.