CVE-2015-2208
EXPLOITEDphpMoAdmin 1.1.2 - Remote Code Execution via Object Parameter
Title source: llmExploitation Summary
CVE-2015-2208 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including @u0x, ptantiku, including a Metasploit module exploits/multi/http/phpmoadmin_exec.
AI-analyzed exploit summary This exploit demonstrates an unauthorized remote code execution vulnerability in PHPMoAdmin via the 'object' POST parameter, which is evaluated as PHP code due to an unsafe 'eval' call in the 'saveObject' function.
Description
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter.
Exploits (3)
This exploit demonstrates an unauthorized remote code execution vulnerability in PHPMoAdmin via the 'object' POST parameter, which is evaluated as PHP code due to an unsafe 'eval' call in the 'saveObject' function.
This repository contains a Dockerized environment and a simple curl command to exploit CVE-2015-2208, a command injection vulnerability in phpMoAdmin 1.1.2 via the 'object' parameter in moadmin.php.
This Metasploit module exploits a PHP command execution vulnerability in PHPMoAdmin 1.1.2 by injecting arbitrary PHP code via the 'object' parameter, leveraging a dangerous use of eval().