CVE-2013-1349

This Metasploit module exploits a PHP code execution vulnerability in OpenSIS (CVE-2013-1349) by leveraging an unsafe `eval()` call in `ajax.php` with user-controlled input from the `modname` parameter. It authenticates, injects base64-encoded payloads, and executes arbitrary commands via PHP functions like `system()` or `exec()`.

This Metasploit module exploits a PHP code execution vulnerability in OpenSIS versions 4.5 to 5.2 by leveraging an unsafe `eval()` call in `ajax.php` with user-controlled input from the `modname` parameter. It authenticates as a user, then injects arbitrary PHP code to achieve remote command execution.