CVE-2006-2770
pppblog < 0.3.8 - Directory Traversal via File Array Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-2770. PoCs published by JosS, rgod.
AI-analyzed exploit summary This exploit demonstrates a file disclosure vulnerability in pppBlog <= 0.3.11 via the randompic.php script. By manipulating the 'files[0]' parameter, an attacker can read arbitrary system files due to insufficient input validation and the requirement of register_globals being enabled.
Description
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the "file" array parameter, as demonstrated by file[0].
Exploits (2)
This exploit demonstrates a file disclosure vulnerability in pppBlog <= 0.3.11 via the randompic.php script. By manipulating the 'files[0]' parameter, an attacker can read arbitrary system files due to insufficient input validation and the requirement of register_globals being enabled.
This exploit leverages a file disclosure vulnerability in pppBlog <= 0.3.8 by manipulating the `files[0]` parameter in `randompic.php` when `register_globals` is enabled. It reads arbitrary files on the target system via a crafted HTTP request.