CVE-2006-4368
IntegraMOD Portal 2.x and earlier - Remote File Inclusion via phpbb_root_path Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4368. PoCs published by nukedx.
AI-analyzed exploit summary This exploit targets a remote command execution vulnerability in Integramod Portal <= 2.x by manipulating the `phpbb_root_path` cookie to include a malicious PHP shell. It establishes a connection to the target and allows arbitrary command execution via HTTP POST requests.
Description
PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Exploits (1)
This exploit targets a remote command execution vulnerability in Integramod Portal <= 2.x by manipulating the `phpbb_root_path` cookie to include a malicious PHP shell. It establishes a connection to the target and allows arbitrary command execution via HTTP POST requests.