CVE-2004-1796
HotNews 0.7.2 - Remote File Inclusion via config[header] or config[incdir] Parameter
Title source: manualExploitation Summary
EIP tracks 3 public exploits for CVE-2004-1796. PoCs published by team_elite, Officerrr.
AI-analyzed exploit summary This is a writeup describing a Remote File Inclusion (RFI) vulnerability in HotNews 0.7.2. It provides the exploit URL but does not include functional exploit code or payload.
Description
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter to hnmain.inc.php3.
Exploits (3)
This is a writeup describing a Remote File Inclusion (RFI) vulnerability in HotNews 0.7.2. It provides the exploit URL but does not include functional exploit code or payload.
This exploit demonstrates a file inclusion vulnerability in HotNews, allowing remote attackers to execute arbitrary PHP scripts by manipulating the 'config[header]' parameter to include malicious files from an external server.
This exploit demonstrates a file inclusion vulnerability in HotNews, allowing remote attackers to execute arbitrary PHP scripts by manipulating the 'config[incdir]' parameter to include malicious files from an attacker-controlled server.