CVE-2015-0935

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::CmdStager def initialize super( 'Name' ...

This Metasploit module exploits a vulnerability in the Bomgar Remote Support, which deserializes user provided data using PHP's unserialize method By providing an specially crafted PHP serialized object, it is possible to write arbitrary data to arbitrary files This effectively allows the execution of arbitrary PHP code in the context of the Bomg ...