CVE-2008-6132

This Metasploit module exploits a PHP code injection vulnerability in phpScheduleIt (CVE-2008-6132) by injecting arbitrary PHP code via the 'start_date' parameter in reserve.php when magic_quotes_gpc is disabled. The exploit uses a custom HTTP header to deliver the base64-encoded payload for execution.

This exploit leverages a PHP code injection vulnerability in phpScheduleIt <= 1.2.10 via the 'start_date' parameter in reserve.php, which is passed to eval(). It allows remote command execution when magic_quotes_gpc is disabled.

This Metasploit module exploits a PHP code injection vulnerability in phpScheduleIt (CVE-2008-6132) via the 'start_date' parameter in 'reserve.php'. It bypasses authentication and executes arbitrary PHP code when 'magic_quotes_gpc' is disabled.