CVE-2020-5849

This Metasploit module exploits CVE-2020-5849, an authentication bypass in Unraid 6.8.0, followed by arbitrary PHP code execution via insecure use of the `extract` function. It leverages a GET request with crafted parameters to achieve remote code execution as root.

This Metasploit module exploits CVE-2020-5849, an authentication bypass in Unraid 6.8.0, combined with an insecure PHP `extract` function usage to achieve remote code execution as root. It sends a crafted GET request to inject PHP code via URI-encoded payloads.