CVE-2012-5223

This Metasploit module exploits a PHP code injection vulnerability in vBSEO <= 3.6.0 via the 'char_repl' POST parameter, leveraging the 'e' modifier in preg_replace() to execute arbitrary code.

This Metasploit module exploits a PHP code injection vulnerability in vBSEO's 'proc_deutf()' function via unsanitized input in the 'char_repl' POST parameter, leveraging the 'e' modifier in preg_replace(). It allows arbitrary code execution through base64-encoded payloads.