CVE-2006-0757
HiveMail <= 1.3 - Remote Code Execution via Eval Injection in Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-0757. PoCs published by GulfTech Security.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in HiveMail, allowing arbitrary PHP code execution via unsanitized input in the 'folderid' parameter. The provided URL injects PHP code to execute 'phpinfo()' as a proof of concept.
Description
Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via (1) the contactgroupid parameter in addressbook.update.php, (2) the messageid parameter in addressbook.add.php, (3) the folderid parameter in folders.update.php, and possibly certain parameters in (4) calendar.event.php, (5) index.php, (6) pop.download.php, (7) read.bounce.php, (8) rules.block.php, (9) language.php, and (10) certain other scripts, as demonstrated by an addressbook.update.php request with a contactgroupid value of phpinfo() preceded by facilitators.
Exploits (3)
This exploit demonstrates a SQL injection vulnerability in HiveMail, allowing arbitrary PHP code execution via unsanitized input in the 'folderid' parameter. The provided URL injects PHP code to execute 'phpinfo()' as a proof of concept.
This exploit demonstrates multiple vulnerabilities in HiveMail, including PHP code execution, XSS, and SQL injection. The provided URL manipulates input to execute arbitrary PHP code via the `cmd` parameter.
This Perl script exploits a command injection vulnerability in HiveMail <= 1.3 by injecting arbitrary commands via the 'com' parameter in the addressbook.add.php endpoint. It requires a valid session ID and constructs a malicious HTTP request to execute system commands on the target server.