vBSEO proc_deutf RCE (CVE-2012-5223)

Exploits CVE-2012-5223 eval injection in vBSEO via charrepl POST to vbseocp.php with base64 PHP in the Code header. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """vBSEO procdeutf eval RCE CVE-2012-5223 — execute session.""" from future import annotations import...

vBSEO - proc_deutf RCE Detection (CVE-2012-5223)

Detects CVE-2012-5223 by POSTing charrepl eval payload to /vbseocp.php with Code: base64passthru"id". !/usr/bin/env python3 -- coding: utf-8 -- """vBSEO procdeutf eval RCE CVE-2012-5223.""" import base64 import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2012-5223: Improper Control of Generation of Code

The procdeutf function in includes/functionsvbseocpabstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" in the charrepl parameter, which is inserted into a regular expression that is processed by...