CVE-2012-0694

This Metasploit module exploits a PHP unserialize() vulnerability in SugarCRM <= 6.3.1, allowing authenticated users to execute arbitrary code via the '__destruct()' method of the 'SugarTheme' class. It writes a malicious PHP file to the web root and triggers payload execution via a crafted HTTP request.

This exploit leverages a PHP object injection vulnerability in SugarCRM CE <= 6.3.1 via insecure unserialize() usage. It authenticates, crafts a malicious serialized SugarTheme object, and achieves remote code execution by writing a web shell to pathCache.php.

This Metasploit module exploits a PHP unserialize vulnerability in SugarCRM <= 6.3.1, allowing authenticated users to execute arbitrary code via the __destruct method of the SugarTheme class. It writes a malicious PHP file to the web root and triggers execution via a crafted HTTP request.