CVE-2011-4075
EXPLOITED IN THE WILDphpLDAPadmin < 1.2.2 - Remote Code Execution via Orderby Parameter
Title source: llmExploitation Summary
CVE-2011-4075 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 3 public exploits from researchers including Metasploit, EgiX, including a Metasploit module exploits/multi/http/phpldapadmin_query_engine.
AI-analyzed exploit summary This Metasploit module exploits a PHP code injection vulnerability in phpLDAPadmin <= 1.2.1.1 via the query_engine parameter, allowing remote code execution by leveraging the create_function() call with user-controlled input.
Description
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011.
Exploits (3)
This Metasploit module exploits a PHP code injection vulnerability in phpLDAPadmin <= 1.2.1.1 via the query_engine parameter, allowing remote code execution by leveraging the create_function() call with user-controlled input.
This exploit demonstrates a remote PHP code injection vulnerability in phpLDAPadmin <= 1.2.1.1 by injecting arbitrary PHP code via the 'orderby' parameter in the 'query_engine' command, leveraging unsafe use of create_function().
This Metasploit module exploits a PHP code injection vulnerability in phpLDAPadmin versions 1.2.1.1 and earlier by leveraging the `create_function()` call in `lib/functions.php`. It injects malicious PHP code via the `query_engine` parameter, allowing remote code execution.