CVE-2014-8998

This Metasploit module exploits a post-authentication PHP code execution vulnerability in X7 Chat 2.0.0 to 2.0.5.1 via the `preg_replace()` function with the `/e` modifier in `lib/message.php`. It sends a crafted message containing malicious PHP code, which is executed when the message is accessed.

This Metasploit module exploits a post-authentication PHP code execution vulnerability in X7 Chat 2.0.0 to 2.0.5.1 via the `preg_replace()` function with the `/e` modifier in `lib/message.php`. It leverages a crafted message containing a base64-encoded payload executed via HTTP header injection.