CVE-2006-1164

Nodez <= 4.6.1.1 - Unauthenticated Sensitive Data Exposure via list.gtdat

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1164. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets CVE-2006-1164 in Nodez CMS, leveraging arbitrary local file inclusion and admin authentication bypass to execute commands. It injects PHP code into a log file and includes it via path traversal or bypasses authentication using stolen MD5 hashes.

Description

Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1588

View Code ZIP pw:eip

This exploit targets CVE-2006-1164 in Nodez CMS, leveraging arbitrary local file inclusion and admin authentication bypass to execute commands. It injects PHP code into a log file and includes it via path traversal or bypasses authentication using stolen MD5 hashes.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Nodez CMS 4.6.1.1 (and possibly prior versions)

No auth needed

Prerequisites: Target running Nodez CMS with vulnerable configuration · Access to the web interface · For action 2: list.gtdat file must be accessible

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →