Exploitation Summary
EIP tracks 4 public exploits for CVE-2002-2200. PoCs published by frog.
AI-analyzed exploit summary This exploit demonstrates a file inclusion vulnerability in Dobermann Forum, where the 'subpath' parameter in newtopic.php can be manipulated to include arbitrary remote files. The attack leverages improper input validation to execute remote PHP scripts.
Description
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.
Exploits (4)
This exploit demonstrates a file inclusion vulnerability in Dobermann Forum, where the 'subpath' parameter in newtopic.php can be manipulated to include arbitrary remote files. The attack leverages improper input validation to execute remote PHP scripts.
This exploit demonstrates a file inclusion vulnerability in Dobermann Forum by manipulating the 'subpath' parameter to include arbitrary remote files. The attack leverages improper input validation to execute remote PHP scripts.
The exploit describes a file inclusion vulnerability in Dobermann Forum, where the 'subpath' parameter in 'enteteacceuil.php' can be manipulated to include arbitrary remote files. This is a classic remote file inclusion (RFI) vulnerability.
The exploit describes a remote file inclusion vulnerability in Dobermann Forum, where an attacker can include arbitrary files from a remote server by manipulating the 'subpath' parameter in specific PHP scripts. This is achieved by supplying a URL to a remote file as the value for the 'subpath' parameter.