Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-1162.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in Nodez CMS, including arbitrary local file inclusion via null byte injection and admin authentication bypass by crafting a custom password hash. It allows command execution through log file poisoning and session hijacking.
Description
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. (dot dot) in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then accessing list.gtdat using the op parameter.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in Nodez CMS, including arbitrary local file inclusion via null byte injection and admin authentication bypass by crafting a custom password hash. It allows command execution through log file poisoning and session hijacking.