CVE-2006-3475
free_qboard 1.1 - Remote File Inclusion via qb_path Parameter
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2006-3475. PoCs published by CrAsh_oVeR_rIdE.
AI-analyzed exploit summary The exploit describes a remote file inclusion vulnerability in QBoard due to improper input sanitization. An attacker can include arbitrary remote files containing malicious PHP code via the 'qb_path' parameter.
Description
Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, a different set of vectors than CVE-2006-2998.
Exploits (7)
The exploit describes a remote file inclusion vulnerability in QBoard due to improper input sanitization. An attacker can include arbitrary remote files containing malicious PHP code via the 'qb_path' parameter.
The provided text describes a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. It outlines the potential for arbitrary server-side script execution but lacks actual exploit code.
The provided text describes a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. It allows arbitrary server-side script execution via the 'qb_path' parameter in features.php.
The provided text describes a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. It lacks executable code but outlines the attack vector via the 'faq.php' script with a malicious 'qb_path' parameter.
The provided text describes a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. It allows arbitrary server-side script execution via a malicious URL parameter but lacks actual exploit code.
The provided text describes a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. It outlines the potential for arbitrary server-side script execution but lacks actual exploit code.
The provided text describes a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. It outlines the potential for arbitrary server-side script execution but lacks actual exploit code.