CVE-2014-125116

This Metasploit module exploits a PHP code execution vulnerability in HybridAuth versions 2.0.9 to 2.2.2 by leveraging an unremoved install.php file to overwrite the config.php file with malicious code. The exploit writes a backdoor, executes the payload, and attempts to clean up by removing the backdoor.

This exploit demonstrates a PHP code injection vulnerability in HybridAuth <= 2.2.2 via insufficient sanitization in the `install.php` script, allowing arbitrary command execution through crafted POST requests.

This Metasploit module exploits a PHP code execution vulnerability in HybridAuth by leveraging an unremoved install.php file to overwrite the config.php file with malicious code. It includes checks for vulnerability, payload delivery, and cleanup steps.