CVE-2006-3019
phpCMS 1.2.1pl2 - Remote Code Execution via PHPCMS_INCLUDEPATH Parameter
Title source: llmExploitation Summary
EIP tracks 10 public exploits for CVE-2006-3019. PoCs published by Federico Fazzi.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It outlines the vulnerability's cause and potential impact but does not include functional exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php. NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7.
Exploits (10)
The provided text describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It outlines the vulnerability's cause and potential impact but does not include functional exploit code.
The code describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It highlights the lack of input sanitization, allowing attackers to include arbitrary remote files via the PHPCMS_INCLUDEPATH parameter.
The provided text describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It outlines the vulnerability's cause and potential impact but does not include functional exploit code.
The provided text describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It outlines the vulnerability's cause and potential impact but does not include functional exploit code.
This is a vulnerability writeup describing a remote file inclusion (RFI) vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. The issue arises due to insufficient sanitization of user-supplied data in the 'PHPCMS_INCLUDEPATH' parameter, allowing remote command execution via malicious URL inclusion.
The provided text describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It outlines the vulnerability's cause and potential impact but does not include functional exploit code.
The code describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2 due to insufficient sanitization of user-supplied data. An attacker can exploit this by manipulating the PHPCMS_INCLUDEPATH parameter to include arbitrary remote files.
The provided text describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It outlines the vulnerability's cause and potential impact but does not include functional exploit code.
The code describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2 due to insufficient sanitization of user-supplied data. The exploit allows an attacker to include arbitrary remote files via the PHPCMS_INCLUDEPATH parameter.
The provided text describes a remote file inclusion vulnerability in phpCMS versions 1.1.7 and 1.2.1pl2. It outlines the vulnerability's cause and potential impact but does not include functional exploit code.