Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0250. PoCs published by Osirys.
AI-analyzed exploit summary This exploit targets a remote command execution vulnerability in Phosheezy 2.0 by extracting the admin password, logging in, and injecting malicious PHP code into a template to achieve RCE. It then provides an interactive shell for command execution.
Description
Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password.
Exploits (1)
This exploit targets a remote command execution vulnerability in Phosheezy 2.0 by extracting the admin password, logging in, and injecting malicious PHP code into a template to achieve RCE. It then provides an interactive shell for command execution.