CVE-2006-1800
SimpleBBS 1.0.6-1.1 - Remote Code Execution via Language Cookie Traversal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1800. PoCs published by rUnViRuS.
AI-analyzed exploit summary This exploit targets a command injection vulnerability in SimpleBBS v1.1 via the 'posts.php' file. It leverages improper input sanitization to execute arbitrary PHP commands by injecting a malicious payload into the 'gl_session' cookie and then triggering it via the 'language' cookie.
Description
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.
Exploits (1)
This exploit targets a command injection vulnerability in SimpleBBS v1.1 via the 'posts.php' file. It leverages improper input sanitization to execute arbitrary PHP commands by injecting a malicious payload into the 'gl_session' cookie and then triggering it via the 'language' cookie.