CVE-2006-0852
devscripts admbook < 1.2.2 - Remote Code Execution via X-Forwarded-For Header Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0852. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets a command injection vulnerability in Admbook <=1.2.2 via the X-Forwarded-For header. It injects a PHP payload into the header, which is then executed by accessing a specific URL with a command parameter.
Description
Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field, which is inserted into content-data.php.
Exploits (1)
This exploit targets a command injection vulnerability in Admbook <=1.2.2 via the X-Forwarded-For header. It injects a PHP payload into the header, which is then executed by accessing a specific URL with a command parameter.