{"uuid": "0d57a764-989f-4bad-82d0-369b986b413e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10070", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/php_charts_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"AkaStep\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a PHP code execution vulnerability in php-Charts\\n          version 1.0 which could be abused to allow users to execute arbitrary\\n          PHP code under the context of the webserver user. The 'url.php' script\\n          calls eval() with user controlled data from any HTTP GET parameter name.\", \"disclosure_date\": \"2013-01-16\", \"fullname\": \"exploit/unix/webapp/php_charts_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"PHP-Charts v1.0 PHP Code Execution Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/php_charts_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/php_charts_exec\", \"references\": [\"CVE-2013-10070\", \"OSVDB-89334\", \"BID-57448\", \"EDB-24201\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:45.995580Z"}