CVE-2006-3993
TSEP < 0.942 - Remote File Inclusion via tsep_config[absPath] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-3993. PoCs published by Philipp Niedziela.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in TSEP 0.9.4.2 due to improper sanitization of the `tsep_config[absPath]` parameter in `copyright.php`. An attacker can include a remote PHP shell by manipulating the parameter to point to a malicious file.
Description
PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in TSEP 0.9.4.2 due to improper sanitization of the `tsep_config[absPath]` parameter in `copyright.php`. An attacker can include a remote PHP shell by manipulating the parameter to point to a malicious file.