CVE-2006-2548
perlpodder < 0.5 - Remote Code Execution via Podcast URL Shell Metacharacters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2548. PoCs published by RedTeam Pentesting.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Prodder by embedding a malicious command in an RSS feed enclosure URL. The payload initiates a reverse shell using netcat, demonstrating arbitrary command execution.
Description
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
Exploits (1)
This exploit leverages a command injection vulnerability in Prodder by embedding a malicious command in an RSS feed enclosure URL. The payload initiates a reverse shell using netcat, demonstrating arbitrary command execution.