CVE-2009-20006

This Metasploit module exploits an arbitrary PHP code execution vulnerability in osCommerce 2.2 by uploading a malicious PHP file through the admin file manager. The exploit leverages unauthenticated file upload to achieve remote code execution.

This PHP script exploits a remote code execution (RCE) vulnerability in osCommerce Online Merchant 2.2 RC2a by sending a crafted HTTP POST request to save a malicious PHP file via the file manager. The exploit leverages improper input validation to upload a webshell.

This Metasploit module exploits an arbitrary PHP code execution vulnerability in osCommerce 2.2 by uploading a malicious PHP file through the admin file manager. The exploit leverages unauthenticated file upload to achieve remote code execution.