CVE-2014-4511

This Metasploit module exploits an unauthenticated remote command execution vulnerability in Gitlist 0.4.0 by injecting commands into a specially crafted filename during a blame operation.

This exploit leverages a command injection vulnerability in Gitlist <= 0.4.0 by crafting a malicious URL path that executes arbitrary commands via the `blame` functionality. The payload is base64-encoded and written to a PHP file in the cache directory, enabling remote code execution.

This repository provides a proof-of-concept for CVE-2014-4511, a remote code execution vulnerability in GitList. The exploit involves uploading a malicious PHP file to the target server and executing arbitrary commands via a reverse shell.

This Metasploit module exploits an unauthenticated remote command execution vulnerability in Gitlist 0.4.0 by injecting commands into a crafted file name during a blame operation. It includes a check method to verify vulnerability and an exploit method to execute the payload.