CVE-2005-2612

This Metasploit module exploits a PHP code execution flaw in WordPress (CVE-2005-2612) by leveraging the 'register_globals' setting to inject malicious payloads via crafted cookie data. It targets versions prior to 1.5.1.3.

This Metasploit module exploits a PHP code execution vulnerability in WordPress versions prior to 1.5.1.3 by leveraging the 'register_globals' setting. It constructs a malicious cookie payload to trigger arbitrary code execution via a chain of WordPress filter functions.