Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4050. PoCs published by Philipp Niedziela.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in phpAutoMembersArea 3.2.5 due to unsanitized input in the $installed_config_file parameter. An attacker can include and execute arbitrary remote files by manipulating the parameter in the auto_check_renewals.php script.
Description
PHP remote file inclusion vulnerability in auto_check_renewals.php in phpAutoMembersArea (phpAMA) 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installed_config_file parameter.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in phpAutoMembersArea 3.2.5 due to unsanitized input in the $installed_config_file parameter. An attacker can include and execute arbitrary remote files by manipulating the parameter in the auto_check_renewals.php script.