Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-4255. PoCs published by Inphex, NetJackal.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the mSQL extension for PHP. It uses a long string of 'A' characters followed by a return address and shellcode to achieve remote code execution on Windows XP.
Description
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.
Exploits (2)
This exploit targets a buffer overflow vulnerability in the mSQL extension for PHP. It uses a long string of 'A' characters followed by a return address and shellcode to achieve remote code execution on Windows XP.
This is a proof-of-concept exploit for a buffer overflow vulnerability in the PHP mSQL extension. It triggers the overflow by passing an overly long string to the msql_connect function, overwriting the EIP register with 'BBBB' (0x42424242).