CVE-2015-2843
GoAutoDial GoAdmin CE - SQL Injection via User Credentials or PATH_INFO
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2015-2843.
PoCs published by Metasploit, Chris McCurley, including Metasploit module exploits/linux/http/goautodial_3_rce_command_injection.
AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in GoAutoDial 3.3 for authentication bypass and command injection, leading to remote code execution with root privileges. It also retrieves admin credentials, including cleartext passwords, from the database.
Description
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4) index.php/go_site/go_get_user_info/.
Exploits (3)
This Metasploit module exploits a SQL injection vulnerability in GoAutoDial 3.3 for authentication bypass and command injection, leading to remote code execution with root privileges. It also retrieves admin credentials, including cleartext passwords, from the database.
The exploit demonstrates multiple vulnerabilities in GoAutoDial 3.3, including SQL injection for authentication bypass, arbitrary file upload, and command injection leading to remote code execution (RCE). The PoC includes clear examples of malicious payloads and techniques to achieve RCE and privilege escalation.
This Metasploit module exploits a SQL injection flaw in GoAutoDial 3.3's login functionality to bypass authentication and perform command injection with root privileges. It also retrieves admin credentials from the database.