Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4205. PoCs published by the master.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion (RFI) vulnerability in ProjectButler 0.8.4 by manipulating the 'rootdir' parameter in multiple PHP files to include arbitrary remote files. The vulnerability allows an attacker to execute remote code by including a malicious file hosted on an external server.
Description
Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to /classes/ scripts including (1) Cache.class.php, (2) Customer.class.php, (3) Performance.class.php, (4) Project.class.php, (5) Representative.class.php, (6) User.class.php, or (7) common.php.
Exploits (1)
This exploit demonstrates a remote file inclusion (RFI) vulnerability in ProjectButler 0.8.4 by manipulating the 'rootdir' parameter in multiple PHP files to include arbitrary remote files. The vulnerability allows an attacker to execute remote code by including a malicious file hosted on an external server.