CVE-2003-0320
ttCMS < 2.3 - Remote Code Execution via Admin Parameter Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0320. PoCs published by [email protected].
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in ttCMS due to insufficient sanitization of the 'admin_root' parameter in 'header.php'. An attacker can include a malicious PHP file from a remote server by manipulating the URL.
Description
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to "1" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in ttCMS due to insufficient sanitization of the 'admin_root' parameter in 'header.php'. An attacker can include a malicious PHP file from a remote server by manipulating the URL.