CVE-2010-4335

This exploit targets a deserialization vulnerability in CakePHP's Security component, allowing unauthenticated attackers to execute arbitrary PHP code via crafted serialized data in POST requests.

This exploit leverages a PHP deserialization vulnerability in CakePHP's Security component to inject arbitrary objects, corrupting the cache and achieving remote code execution by manipulating the file_map to include a malicious PHP payload.

This Metasploit module exploits a PHP deserialization vulnerability in CakePHP's Security component (CVE-2010-4335) to achieve remote code execution. It crafts a malicious serialized payload, encodes it, and sends it via POST requests to trigger arbitrary code execution.