CVE-2012-5692
Invision Power Board 3.1.x-3.3.x core.php - Impact Unknown
Title source: manualExploitation Summary
EIP tracks 4 public exploits for CVE-2012-5692.
PoCs published by Metasploit, EgiX, webDEViL, including Metasploit module exploits/unix/webapp/invision_pboard_unserialize_exec.
AI-analyzed exploit summary This Metasploit module exploits a PHP unserialize() vulnerability in Invision IP.Board <= 3.3.4 to achieve remote code execution by writing arbitrary PHP code to a file via the __destruct() method of the dbMain class.
Description
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors.
Exploits (4)
This Metasploit module exploits a PHP unserialize() vulnerability in Invision IP.Board <= 3.3.4 to achieve remote code execution by writing arbitrary PHP code to a file via the __destruct() method of the dbMain class.
This exploit leverages a PHP object injection vulnerability in Invision Power Board <= 3.3.4 via insecure unserialize() usage in cookie handling. It achieves remote code execution by injecting malicious serialized data into the 'member_id' cookie, which triggers the __destruct() method of the 'db_driver_mysql' class to write a PHP shell.
This exploit leverages a PHP object injection vulnerability in Invision Power Board via unsafe unserialize() usage in cookie handling. It bypasses a patch by using a crafted serialized payload to write arbitrary PHP code to a file, achieving remote code execution.
This Metasploit module exploits a PHP unserialize() vulnerability in Invision IP.Board <= 3.3.4, allowing unauthenticated remote code execution via a crafted cookie. It leverages the __destruct() method of the db_driver_mysql class to write arbitrary PHP code to a file in the web directory.