CVE-2006-3611
Phorum 5 - Authenticated Directory Traversal and Arbitrary File Execution via GLOBALS[template] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-3611. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets a local file inclusion vulnerability in Phorum 5, allowing arbitrary command execution via log poisoning. It requires authentication and specific PHP configurations (register_globals=On, magic_quotes_gpc=Off).
Description
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php.
Exploits (1)
This exploit targets a local file inclusion vulnerability in Phorum 5, allowing arbitrary command execution via log poisoning. It requires authentication and specific PHP configurations (register_globals=On, magic_quotes_gpc=Off).