CVE-2006-2149
Aardvark Topsites PHP <= 4.2.2 - Remote File Inclusion via CONFIG[path] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2149. PoCs published by cijfer.
AI-analyzed exploit summary This Perl script exploits a remote command execution vulnerability in Aardvark Topsites PHP <=4.2.2 by injecting commands via the 'CONFIG[path]' parameter in 'lostpw.php'. It uses LWP::UserAgent to send crafted HTTP requests and retrieves command output by splitting the response on a delimiter.
Description
PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the CONFIG[path] parameter, as demonstrated by including a GIF that contains PHP code.
Exploits (1)
This Perl script exploits a remote command execution vulnerability in Aardvark Topsites PHP <=4.2.2 by injecting commands via the 'CONFIG[path]' parameter in 'lostpw.php'. It uses LWP::UserAgent to send crafted HTTP requests and retrieves command output by splitting the response on a delimiter.