CVE-2011-10011

This Metasploit module exploits a PHP code injection vulnerability in WeBid 1.0.2 via the converter.php file, allowing unauthenticated remote code execution by injecting payloads into includes/currencies.php.

This exploit targets WeBid <= 1.0.2, leveraging an arbitrary PHP code injection vulnerability in converter.php to achieve remote code execution. It injects malicious code into the currencies.php file via unsanitized POST parameters, then executes commands through a crafted payload.

This Metasploit module exploits a PHP code injection vulnerability in WeBid 1.0.2 via the converter.php file, allowing unauthenticated remote code execution by injecting payloads into includes/currencies.php.