Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-3517. PoCs published by StorMBoY.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in RW::Download, where unsanitized user input in the 'root_path' parameter allows arbitrary remote file inclusion and execution of malicious PHP code. The example URL demonstrates the vulnerability but lacks executable exploit code.
Description
PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
Exploits (1)
The provided text describes a remote file inclusion vulnerability in RW::Download, where unsanitized user input in the 'root_path' parameter allows arbitrary remote file inclusion and execution of malicious PHP code. The example URL demonstrates the vulnerability but lacks executable exploit code.