CVE-2018-19518

This Metasploit module exploits CVE-2018-19518, a vulnerability in PHP's imap_open function that allows remote code execution by leveraging the ProxyCommand option in SSH when rsh is mapped to SSH on Debian-based systems. It targets applications like Prestashop, SuiteCRM, and e107 v2 by injecting a malicious command through IMAP configuration settings.

This PoC exploits CVE-2018-19518, a command injection vulnerability in the target software, by sending a crafted HTTP POST request with a base64-encoded reverse shell payload. The exploit writes a reverse shell script to /tmp/test and executes it.

This repository contains a functional exploit for CVE-2018-19518, which leverages the `imap_open()` function in PHP to achieve remote code execution (RCE) via the `-oProxyCommand` argument. The exploit demonstrates how to bypass disabled functions by injecting a base64-encoded command into the hostname parameter.

This repository contains a working proof-of-concept exploit for CVE-2018-19518, which leverages a command injection vulnerability in PHP's imap_open function. The exploit demonstrates how to bypass disable_functions via the ProxyCommand parameter in the IMAP server string.

This Metasploit module exploits CVE-2018-19518, a vulnerability in PHP's imap_open function that allows remote code execution by leveraging the ProxyCommand option in SSH when rsh is mapped to SSH on Debian-based systems. It targets applications like Prestashop, SuiteCRM, e107, and Horde IMP H3.