CVE-2015-2208

This exploit demonstrates an unauthorized remote code execution vulnerability in PHPMoAdmin via the 'object' POST parameter, which is evaluated as PHP code due to an unsafe 'eval' call in the 'saveObject' function.

This repository contains a Dockerized environment and a simple curl command to exploit CVE-2015-2208, a command injection vulnerability in phpMoAdmin 1.1.2 via the 'object' parameter in moadmin.php.

This Metasploit module exploits a PHP command execution vulnerability in PHPMoAdmin 1.1.2 by injecting arbitrary PHP code via the 'object' parameter, leveraging a dangerous use of eval().