Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-6132.
PoCs published by Metasploit, EgiX, EgiX, juan vazquez, including Metasploit module exploits/multi/http/phpscheduleit_start_date.
AI-analyzed exploit summary This Metasploit module exploits a PHP code injection vulnerability in phpScheduleIt (CVE-2008-6132) by injecting arbitrary PHP code via the 'start_date' parameter in reserve.php when magic_quotes_gpc is disabled. The exploit uses a custom HTTP header to deliver the base64-encoded payload for execution.
Description
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via the start_date parameter.
Exploits (3)
This Metasploit module exploits a PHP code injection vulnerability in phpScheduleIt (CVE-2008-6132) by injecting arbitrary PHP code via the 'start_date' parameter in reserve.php when magic_quotes_gpc is disabled. The exploit uses a custom HTTP header to deliver the base64-encoded payload for execution.
This exploit leverages a PHP code injection vulnerability in phpScheduleIt <= 1.2.10 via the 'start_date' parameter in reserve.php, which is passed to eval(). It allows remote command execution when magic_quotes_gpc is disabled.
This Metasploit module exploits a PHP code injection vulnerability in phpScheduleIt (CVE-2008-6132) via the 'start_date' parameter in 'reserve.php'. It bypasses authentication and executes arbitrary PHP code when 'magic_quotes_gpc' is disabled.