CVE-2006-4198

wheatblog < 1.1 - Remote File Inclusion via wb_class_dir Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4198. PoCs published by O.U.T.L.A.W.

AI-analyzed exploit summary The code describes a local file inclusion vulnerability in session.php due to improper handling of the 'wb_class_dir' parameter. The PoC suggests appending a shell path to exploit it, but no actual exploit code is provided.

Description

PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wb_class_dir parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by O.U.T.L.A.W · textwebappsphp

https://www.exploit-db.com/exploits/2174

View Code ZIP pw:eip

The code describes a local file inclusion vulnerability in session.php due to improper handling of the 'wb_class_dir' parameter. The PoC suggests appending a shell path to exploit it, but no actual exploit code is provided.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Theoretical

Target: Unknown (likely a PHP-based web application)

No auth needed

Prerequisites: Access to the vulnerable endpoint

MITRE ATT&CK