CVE-2011-5147
FreeWebshop < 2.2.9 - Remote Code Execution via Ajax File Manager
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-5147. PoCs published by EgiX.
AI-analyzed exploit summary This exploit leverages a vulnerability in FreeWebshop's ajax_save_name.php to manipulate the $selectedDocuments array, leading to arbitrary PHP code execution via the writeInfo function. It establishes a remote shell by injecting malicious PHP code into data.php.
Description
Static code injection vulnerability in ajax_save_name.php in the Ajax File Manager module in the tinymce plugin in FreeWebshop 2.2.9 R2 and earlier allows remote attackers to inject arbitrary PHP code into data.php via the selected document, as demonstrated by a call to ajax_file_cut.php and then to ajax_save_name.php.
Exploits (1)
This exploit leverages a vulnerability in FreeWebshop's ajax_save_name.php to manipulate the $selectedDocuments array, leading to arbitrary PHP code execution via the writeInfo function. It establishes a remote shell by injecting malicious PHP code into data.php.