k3ystr0k3r/cve-2015-10141PoC for CVE-2015-10141 – Xdebug unauthenticated RCE
CVE-2015-10141 is an unauthenticated OS command injection vulnerability affecting Xdebug versions 2.5.5 and earlier.
Root Cause: When Xdebug's remote debugging feature is enabled, the extension listens on port 9000 and accepts debugger protocol commands without any form of authentication.
Attack Vector: An attacker can send specially crafted eval commands through this interface to execute arbitrary PHP code, which can then invoke system-level functions like system() or passthru(), leading to OS command injection.
Impact: Successful exploitation grants full control over the target host under the privileges of the web server user.
| Item | Details |
|---|
| Vulnerable Component | Xdebug (PHP extension) |
| Affected Versions | 2.5.5 and earlier |
| Vendor | Derick Rethans (Xdebug official) |
| CVSS Score | 9.3 (Critical) |
DISCLAIMER
The Proof-of-Concept (PoC) exploit code included in this repository is provided strictly for security research and educational purposes.
Lawful Use Only: This PoC must only be used on systems for which you have explicit authorization (e.g., your own test environments or systems with written permission from the owner) for security assessments.
No Malicious Use: It is strictly forbidden to use this PoC for unauthorized access, data theft, system disruption, or any other illegal activities. Unauthorized exploitation of this vulnerability may violate cybersecurity laws and regulations, and the perpetrator shall bear all corresponding legal liabilities.
Use at Your Own Risk: Running this PoC may cause irreversible damage to the target system (including but not limited to service interruptions, data corruption, etc.). The user assumes all risks, and the author and repository maintainers are not liable for any direct or indirect damages.
Test Environment Only: It is highly recommended to run this PoC only in isolated test environments. Never use it on production systems or unauthorized networks.
Fix First: If this vulnerability is discovered in your systems, you should immediately apply the mitigation measures mentioned above rather than relying on the exploit for persistence.
