CVE-2006-4418
Wikepage 2006.2a Opus 10 - Directory Traversal via lng Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4418. PoCs published by Hessam-x.
AI-analyzed exploit summary This exploit targets a PHP code injection vulnerability in WIKEPAGE <= V2006.2a. It injects malicious PHP code into the server's log files via HTTP headers and then executes arbitrary commands by including the log file.
Description
Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary local files via the lng parameter, as demonstrated by inserting PHP code into a log file.
Exploits (1)
This exploit targets a PHP code injection vulnerability in WIKEPAGE <= V2006.2a. It injects malicious PHP code into the server's log files via HTTP headers and then executes arbitrary commands by including the log file.