CVE-2005-2155
EasyPHPCalendar 6.1.5 - Remote File Inclusion via serverPath Parameter
Title source: manualExploitation Summary
EIP tracks 5 public exploits for CVE-2005-2155. PoCs published by Albania Security Clan.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in EasyPHPCalendar 6.1.5, where unsanitized user input allows arbitrary server-side script execution. The example URL demonstrates how an attacker could exploit this by including remote code via the 'serverPath' parameter.
Description
PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter.
Exploits (5)
The provided text describes a remote file inclusion vulnerability in EasyPHPCalendar 6.1.5, where unsanitized user input allows arbitrary server-side script execution. The example URL demonstrates how an attacker could exploit this by including remote code via the 'serverPath' parameter.
The code describes a remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 due to improper input sanitization. An attacker can exploit this by injecting a remote URL into the 'serverPath' parameter to execute arbitrary server-side script code.
The provided text describes a remote file inclusion vulnerability in EasyPHPCalendar 6.1.5, where unsanitized user input in the 'serverPath' parameter allows arbitrary server-side script execution. The example URL demonstrates how an attacker could exploit this to include remote code.
The provided text describes a remote file inclusion vulnerability in EasyPHPCalendar 6.1.5, where unsanitized user input allows arbitrary server-side script execution. The example URL demonstrates how an attacker could exploit this by injecting a remote script path.
The provided text describes a remote file inclusion vulnerability in EasyPHPCalendar version 6.1.5, where unsanitized user input allows arbitrary server-side script execution. The example URL demonstrates how an attacker could exploit this by injecting a remote code path.