CVE-2006-4040
mywebland myevent < 1.3 - Remote File Inclusion via myevent_path Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4040. PoCs published by CeNGiZ-HaN.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in myEvent due to improper input sanitization. An attacker can include arbitrary remote files containing malicious PHP code, leading to remote code execution in the context of the webserver process.
Description
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in myEvent due to improper input sanitization. An attacker can include arbitrary remote files containing malicious PHP code, leading to remote code execution in the context of the webserver process.