CVE-2005-3789
phpwcms 1.2.5 - Directory Traversal via form_lang or imgdir Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-3789. PoCs published by Stefan Lochbihler.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in phpWCMS due to improper input sanitization. An attacker can leverage this to read arbitrary files, such as /etc/passwd, by manipulating the 'form_lang' parameter.
Description
Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) form_lang parameter in login.php and (2) the imgdir parameter in random_image.php.
Exploits (2)
This exploit demonstrates a remote file inclusion vulnerability in phpWCMS due to improper input sanitization. An attacker can leverage this to read arbitrary files, such as /etc/passwd, by manipulating the 'form_lang' parameter.
The provided code is a writeup describing a directory traversal vulnerability in phpWCMS, allowing an attacker to access sensitive files by manipulating the 'imgdir' parameter. It does not contain executable exploit code but explains the vulnerability.