CVE-2006-1032

This exploit targets a command injection vulnerability in phpRPC <= 0.7 by injecting malicious commands into an XML payload sent via HTTP POST. It establishes a connection to the target server and executes arbitrary commands by breaking out of the intended XML structure.

The exploit demonstrates a remote code execution vulnerability in phpRPC <= 0.7 due to unsanitized input passed to an eval() call in the decode() function. The PoC shows how malicious XML data can execute arbitrary PHP code.