CVE-2005-2086

This Metasploit module exploits a PHP code injection vulnerability in phpBB's viewtopic.php via the 'highlight' parameter, leveraging improper input validation in preg_replace(). It supports multiple versions and automatically detects the appropriate exploit method.

This is a Metasploit module exploiting CVE-2005-2086, an arbitrary command execution vulnerability in phpBB 2.0.15. It crafts a malicious HTTP GET request with a payload encoded as chr() function calls, executed via passthru().

This Metasploit module exploits a PHP code injection vulnerability in phpBB's viewtopic.php via the 'highlight' parameter, leveraging improper input validation in preg_replace(). It supports multiple versions of phpBB (2.0.4-2.0.15) and automatically detects the appropriate exploit method.