Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-2134. PoCs published by frog.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion (RFI) vulnerability in PEEL, allowing an attacker to include and execute arbitrary PHP code from a remote server by manipulating the 'dirroot' parameter. The attack leverages the webserver's privileges to achieve remote code execution (RCE).
Description
haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file.
Exploits (1)
This exploit demonstrates a remote file inclusion (RFI) vulnerability in PEEL, allowing an attacker to include and execute arbitrary PHP code from a remote server by manipulating the 'dirroot' parameter. The attack leverages the webserver's privileges to achieve remote code execution (RCE).