CVE-2008-4687

This Metasploit module exploits a post-authentication RCE vulnerability in MantisBT by injecting PHP code via the 'sort' parameter in manage_proj_page.php. It logs in, sends a malicious payload, and executes arbitrary PHP code.

This exploit targets a PHP code injection vulnerability in Mantis Bug Tracker <= 1.1.3 via the 'sort' parameter in manage_proj_page.php. It leverages the unsafe use of create_function() to execute arbitrary commands through a crafted HTTP request.

This repository contains a functional Python exploit for CVE-2008-4687, which targets a code execution vulnerability in MantisBT via the 'sort' parameter in manage_proj_page.php. The exploit leverages PHP code injection through the create_function call in the multi_sort function.

This repository contains a functional Python exploit for CVE-2008-4687, targeting Mantis Bug Tracker versions prior to 1.2.x. The exploit leverages a PHP code injection vulnerability in the 'manage_proj_page.php' page via a crafted cookie, leading to remote command execution.

This Metasploit module exploits a post-authentication RCE vulnerability in MantisBT (CVE-2008-4687) by injecting PHP code via the 'sort' parameter in manage_proj_page.php. It includes authentication handling and payload delivery via base64-encoded commands.