CVE-2006-3363

Xoops Glossaire Module 1.7 - Remote File Inclusion via Index.php pa Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3363. PoCs published by CrAzY CrAcKeR.

AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Glossaire, where unsanitized user input in the 'pa' parameter allows arbitrary PHP code execution. No actual exploit code is present, only a description and example URL.

Description

PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by CrAzY CrAcKeR · textwebappsphp

https://www.exploit-db.com/exploits/28159

View Code ZIP pw:eip

The provided text describes a remote file inclusion vulnerability in Glossaire, where unsanitized user input in the 'pa' parameter allows arbitrary PHP code execution. No actual exploit code is present, only a description and example URL.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Theoretical

Target: Glossaire (version unspecified)

No auth needed

Prerequisites: Remote file hosting with malicious PHP code · PHP allow_url_include enabled on target

MITRE ATT&CK