CVE-2013-2097

This Metasploit module exploits an information disclosure vulnerability in Zpanel via a vulnerable version of pChart to read arbitrary files, extract MySQL credentials, and achieve remote code execution by uploading a malicious PHP payload through PHPMyAdmin.

The vulnerability in ZPanel's template parser allows arbitrary PHP code execution due to insufficient filtering of malicious code in template files. Combined with the `zsudo` binary, this can lead to root command execution.

This Metasploit module exploits an information disclosure vulnerability in ZPanel (CVE-2013-2097) via a vulnerable version of pChart to read arbitrary files, extract MySQL credentials, and achieve remote code execution by uploading a malicious PHP payload through PHPMyAdmin.