CVE-2025-34116

The exploit demonstrates a multi-stage attack on IPFire < 2.19 Core Update 101, combining XSS, CSRF bypass, and command injection in proxy.cgi to achieve remote command execution. It includes detailed PoC code for each stage, culminating in a reverse shell via AWK.

This Metasploit module exploits a remote command execution vulnerability in IPFire's proxy.cgi page by injecting a payload into the user creation form. The exploit leverages command injection via the password field to achieve RCE on vulnerable versions.