CVE-2013-2097

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' require 'msf/core/exploit/php_exe' require 'nokogiri' require 'uri' class Metasploit3 < Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper ...

Hi all, There's an arbitrary (PHP) code execution in ZPanel, a free and open-source shared hosting control panel Using the included zsudo binary, access can be escalated and commands can be run as root The vulnerability: ZPanel uses a poor "templater" system that basically consists of a few str_replace calls and an eval and as could be expec ...