CVE-2007-5423

This Metasploit module exploits a remote PHP code execution vulnerability in TikiWiki (<= 1.9.8) via the 'tiki-graph_formula.php' script, which improperly sanitizes user input passed to create_function(). It allows arbitrary PHP code execution by injecting malicious payloads into the 'f' parameter.

This exploit demonstrates a remote PHP injection vulnerability in TikiWiki 1.9.8 by injecting arbitrary PHP code via the 'f[]' parameter in the tiki-graph_formula.php script. The example URL triggers the phpinfo() function, confirming code execution.

This Metasploit module exploits a PHP code execution vulnerability in TikiWiki <= 1.9.8 via the 'tiki-graph_formula.php' script, which improperly sanitizes user input passed to create_function(). It allows arbitrary PHP code execution by injecting malicious payloads into the 'f' parameter.