CVE-2010-4335
CakePHP 1.2.8-1.3.5 - Remote Code Execution via Unserialize in Security Component
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-4335.
PoCs published by Metasploit, felix, tdz, Felix Wilhelm, including Metasploit module exploits/unix/webapp/cakephp_cache_corruption.
AI-analyzed exploit summary This exploit targets a deserialization vulnerability in CakePHP's Security component, allowing unauthenticated attackers to execute arbitrary PHP code via crafted serialized data in POST requests.
Description
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.
Exploits (3)
This exploit targets a deserialization vulnerability in CakePHP's Security component, allowing unauthenticated attackers to execute arbitrary PHP code via crafted serialized data in POST requests.
This exploit leverages a PHP deserialization vulnerability in CakePHP's Security component to inject arbitrary objects, corrupting the cache and achieving remote code execution by manipulating the file_map to include a malicious PHP payload.
This Metasploit module exploits a PHP deserialization vulnerability in CakePHP's Security component (CVE-2010-4335) to achieve remote code execution. It crafts a malicious serialized payload, encodes it, and sends it via POST requests to trigger arbitrary code execution.