CVE-2006-0791
DreamCost HostAdmin - Remote File Inclusion via Uninitialized $path Variable
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0791. PoCs published by ReZEN.
AI-analyzed exploit summary This exploit leverages a remote file inclusion vulnerability in HostAdmin by allowing an attacker to include a malicious PHP file via unsanitized input. It executes arbitrary commands on the target system by writing a PHP file with embedded system calls and parsing the output.
Description
PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use.
Exploits (1)
This exploit leverages a remote file inclusion vulnerability in HostAdmin by allowing an attacker to include a malicious PHP file via unsanitized input. It executes arbitrary commands on the target system by writing a PHP file with embedded system calls and parsing the output.