Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-2392. PoCs published by Kacper.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in Php Blue Dragon Platinum. The vulnerability arises from improper input validation in the `vsDragonRootPath` parameter, allowing an attacker to include arbitrary remote files.
Description
PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in Php Blue Dragon Platinum. The vulnerability arises from improper input validation in the `vsDragonRootPath` parameter, allowing an attacker to include arbitrary remote files.