CVE-2015-2845
GoAutoDial GoAdmin CE - OS Command Injection via cpanel PATH_INFO
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2015-2845.
PoCs published by Metasploit, Chris McCurley, including Metasploit module exploits/linux/http/goautodial_3_rce_command_injection.
AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in GoAutoDial 3.3 for authentication bypass and command injection, leading to remote code execution with root privileges. It also retrieves admin credentials, including cleartext passwords, from the database.
Description
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO.
Exploits (3)
This Metasploit module exploits a SQL injection vulnerability in GoAutoDial 3.3 for authentication bypass and command injection, leading to remote code execution with root privileges. It also retrieves admin credentials, including cleartext passwords, from the database.
The exploit demonstrates multiple vulnerabilities in GoAutoDial 3.3, including SQL injection for authentication bypass, arbitrary file upload, and command injection leading to remote code execution (RCE). The PoC includes clear examples of malicious payloads and techniques to achieve RCE and privilege escalation.
This Metasploit module exploits a SQL injection flaw in GoAutoDial 3.3 for authentication bypass and command injection, leading to RCE with root privileges. It also retrieves admin credentials from the database.