CVE-2012-6096

This Metasploit module exploits a command injection vulnerability in Nagios3's history.cgi script (CVE-2012-6096) by injecting a base64-encoded payload into the 'host' parameter, leveraging ROP chains for different targets.

This Metasploit module exploits a command injection vulnerability in Nagios3's history.cgi script (CVE-2012-6096) by injecting a malicious payload into the 'host' parameter, leveraging ROP chains for different targets to achieve remote code execution.

This exploit targets a buffer overflow vulnerability in Nagios history.cgi, allowing remote command execution via a crafted HTTP request. It uses a ROP chain to bypass URL escaping and execute arbitrary commands, including a connect-back shell.