CVE-2011-4075

This Metasploit module exploits a PHP code injection vulnerability in phpLDAPadmin <= 1.2.1.1 via the query_engine parameter, allowing remote code execution by leveraging the create_function() call with user-controlled input.

This exploit demonstrates a remote PHP code injection vulnerability in phpLDAPadmin <= 1.2.1.1 by injecting arbitrary PHP code via the 'orderby' parameter in the 'query_engine' command, leveraging unsafe use of create_function().

This Metasploit module exploits a PHP code injection vulnerability in phpLDAPadmin versions 1.2.1.1 and earlier by leveraging the `create_function()` call in `lib/functions.php`. It injects malicious PHP code via the `query_engine` parameter, allowing remote code execution.