CVE-2012-6554
activeCollab Chat Module < 1.5.2 - Authenticated Remote Code Execution via Message Text Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-6554.
PoCs published by Metasploit, including Metasploit module exploits/multi/http/activecollab_chat.
AI-analyzed exploit summary This Metasploit module exploits a PHP code injection vulnerability in Active Collab's chat module (CVE-2012-6554) by abusing a preg_replace() function with the /e modifier. It authenticates, injects malicious code via a crafted message, and triggers execution by accessing the chat history.
Description
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.
Exploits (2)
This Metasploit module exploits a PHP code injection vulnerability in Active Collab's chat module (CVE-2012-6554) by abusing a preg_replace() function with the /e modifier. It authenticates, injects malicious code via a crafted message, and triggers execution by accessing the chat history.
This Metasploit module exploits a PHP code injection vulnerability in Active Collab's chat module via a `preg_replace()` with the `/e` modifier. It authenticates, injects malicious payload via a crafted message, and triggers execution by accessing the chat history.