CVE-2005-2651

Zorum 3.5 - Remote Code Execution via argv Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-2651. PoCs published by rgod.

AI-analyzed exploit summary This PHP script exploits a command injection vulnerability in Zorum 3.5 by sending a crafted HTTP request to the 'prod.php' endpoint with an 'argv[1]' parameter containing a pipe character followed by a user-supplied command. The script supports proxy usage and displays the response in a hex dump format.

Description

gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/26171

View Code ZIP pw:eip

This PHP script exploits a command injection vulnerability in Zorum 3.5 by sending a crafted HTTP request to the 'prod.php' endpoint with an 'argv[1]' parameter containing a pipe character followed by a user-supplied command. The script supports proxy usage and displays the response in a hex dump format.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Zorum 3.5 (possibly prior versions)

No auth needed

Prerequisites: Network access to the target web server · The 'prod.php' endpoint must be accessible

MITRE ATT&CK