CVE-2006-3343

CrisoftRicette 1.0pre15b - Remote File Inclusion via crisoftricette Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3343. PoCs published by CrAzY.CrAcKeR.

AI-analyzed exploit summary The exploit describes a remote file inclusion vulnerability in CrisoftRicette due to improper input sanitization. An attacker can include arbitrary remote PHP files via the 'crisoftricette' parameter in cookbook.php.

Description

PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary PHP code via a URL in the crisoftricette parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by CrAzY.CrAcKeR · textwebappsphp
https://www.exploit-db.com/exploits/28114

The exploit describes a remote file inclusion vulnerability in CrisoftRicette due to improper input sanitization. An attacker can include arbitrary remote PHP files via the 'crisoftricette' parameter in cookbook.php.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: CrisoftRicette (version not specified)
No auth needed
Prerequisites: Remote PHP file hosting · Target server with allow_url_include enabled
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27472
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1184
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/438459/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18674

Scores

EPSS 0.0250
EPSS Percentile 83.0%

Details

Status published
Products (1)
crisoft_ricette/crisoft_ricette 1.0pre15b
Published Jul 03, 2006
Tracked Since Feb 18, 2026