CVE-2013-5743

This Metasploit module exploits an unauthenticated SQL injection in Zabbix <= 2.0.8 to extract an admin session ID, then uploads and executes a malicious script via 'scripts_exec.php' for remote code execution.

This Metasploit module exploits an unauthenticated SQL injection vulnerability in Zabbix versions 2.0.8 and lower to retrieve an active session ID, then leverages it to upload and execute a malicious script via 'scripts_exec.php' for remote code execution.