Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4311. PoCs published by Philipp Niedziela.
AI-analyzed exploit summary This is a writeup detailing a Remote File Inclusion (RFI) vulnerability in Sonium Enterprise Adressbook Version 0.2. The vulnerability arises from unsanitized user input in the 'folder' parameter, allowing remote file execution.
Description
PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php.
Exploits (1)
This is a writeup detailing a Remote File Inclusion (RFI) vulnerability in Sonium Enterprise Adressbook Version 0.2. The vulnerability arises from unsanitized user input in the 'folder' parameter, allowing remote file execution.