Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4236. PoCs published by Saudi Hackrz.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Powergap Shop software (versions <= s0x.php). The vulnerability allows an attacker to include and execute arbitrary remote files via the 'shopid' parameter in multiple PHP scripts (s01.php, s02.php, s03.php, s04.php).
Description
Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and (d) s04.php; and possibly a URL located after "shopid=" or "sid=" in the PATH_INFO.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Powergap Shop software (versions <= s0x.php). The vulnerability allows an attacker to include and execute arbitrary remote files via the 'shopid' parameter in multiple PHP scripts (s01.php, s02.php, s03.php, s04.php).