CVE-2008-4687
Mantis < 1.1.4 - Authenticated Remote Code Execution via Sort Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2008-4687.
PoCs published by Metasploit, EgiX, nmurilo, including Metasploit module exploits/multi/http/mantisbt_manage_proj_page_rce.
AI-analyzed exploit summary This Metasploit module exploits a post-authentication RCE vulnerability in MantisBT by injecting PHP code via the 'sort' parameter in manage_proj_page.php. It logs in, sends a malicious payload, and executes arbitrary PHP code.
Description
manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by create_function within the multi_sort function in core/utility_api.php.
Exploits (5)
This Metasploit module exploits a post-authentication RCE vulnerability in MantisBT by injecting PHP code via the 'sort' parameter in manage_proj_page.php. It logs in, sends a malicious payload, and executes arbitrary PHP code.
This exploit targets a PHP code injection vulnerability in Mantis Bug Tracker <= 1.1.3 via the 'sort' parameter in manage_proj_page.php. It leverages the unsafe use of create_function() to execute arbitrary commands through a crafted HTTP request.
This repository contains a functional Python exploit for CVE-2008-4687, which targets a code execution vulnerability in MantisBT via the 'sort' parameter in manage_proj_page.php. The exploit leverages PHP code injection through the create_function call in the multi_sort function.
This repository contains a functional Python exploit for CVE-2008-4687, targeting Mantis Bug Tracker versions prior to 1.2.x. The exploit leverages a PHP code injection vulnerability in the 'manage_proj_page.php' page via a crafted cookie, leading to remote command execution.
This Metasploit module exploits a post-authentication RCE vulnerability in MantisBT (CVE-2008-4687) by injecting PHP code via the 'sort' parameter in manage_proj_page.php. It includes authentication handling and payload delivery via base64-encoded commands.