CVE-2009-20006

This Metasploit module exploits an arbitrary PHP code execution vulnerability in osCommerce 2.2 by uploading a malicious PHP file through the admin file manager. The exploit leverages unauthenticated file upload to achieve remote code execution.

This Metasploit module exploits an arbitrary PHP code execution vulnerability in osCommerce 2.2 by uploading a malicious PHP file through the admin file manager. The exploit leverages unauthenticated file upload to achieve remote code execution.

This PHP script exploits a remote code execution (RCE) vulnerability in osCommerce Online Merchant 2.2 RC2a by sending a crafted HTTP POST request to save a malicious PHP file via the file manager. The exploit leverages improper input validation to upload a webshell.