CVE-2005-2633
PHPTB Topic Board < 2.0 - Remote PHP File Inclusion via absolutepath Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2005-2633. PoCs published by Filip Groszynski.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in PHPTB, where unsanitized user input allows arbitrary script execution. The example URL demonstrates the attack vector but lacks executable code.
Description
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.
Exploits (5)
The provided text describes a remote file inclusion vulnerability in PHPTB, where unsanitized user input allows arbitrary script execution. The example URL demonstrates the attack vector but lacks executable code.
The provided text describes a remote file inclusion vulnerability in PHPTB due to improper input sanitization. It allows arbitrary server-side script execution via manipulated 'absolutepath' parameter.
The provided text describes a remote file inclusion vulnerability in PHPTB due to improper input sanitization. It allows arbitrary server-side script execution with web server privileges but lacks actual exploit code.
The provided text describes a remote file inclusion vulnerability in PHPTB due to improper input sanitization. It allows arbitrary server-side script execution with web server privileges but lacks actual exploit code.
The provided text describes a remote file inclusion vulnerability in PHPTB due to improper input sanitization. An attacker can exploit this to execute arbitrary server-side script code by manipulating the 'absolutepath' parameter.