This Metasploit module exploits a vulnerability in the eval command present in Xdebug versions 2.5.5 and below. This allows the attacker to execute arbitrary php code as the context of the web user.
a94a19cfaf669742a83aa9ced9e5f3db211d2e4e73a6dab97341c79d196c8536