CVE-2020-5847

This is a detailed technical analysis of CVE-2020-5847, covering an authentication bypass via a whitelist flaw in `auth_request.php` and arbitrary code execution through variable overwriting using PHP's `extract` function. The writeup includes root cause analysis, exploit chain explanation, and affected versions.

This Metasploit module exploits CVE-2020-5847 and CVE-2020-5849 in Unraid 6.8.0, combining an authentication bypass with a PHP code execution vulnerability via insecure use of the `extract` function. It delivers a PHP payload encoded in base64 to achieve remote code execution as root.

This Metasploit module exploits CVE-2020-5847 and CVE-2020-5849 in Unraid 6.8.0, combining an authentication bypass with a PHP code execution vulnerability via insecure use of the `extract` function. It sends a crafted GET request to execute arbitrary PHP code as root.