CVE-2013-5696

The exploit demonstrates two vulnerabilities in GLPI 0.84.1: improper access control allowing database host manipulation and arbitrary PHP code injection via insufficient input validation in the installation script. Both exploits use HTTP POST requests to modify configuration files.

This Metasploit module exploits a command injection vulnerability in GLPI's install.php script by injecting PHP code into the database configuration, which is then executed via a crafted GET request.

This Metasploit module exploits a command injection vulnerability in GLPI's install.php script by injecting malicious PHP code into the database configuration, which is then executed via a crafted GET request.