Exploitation Summary
EIP tracks 4 public exploits for CVE-2006-4423. PoCs published by Vampire.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Bigace 1.8.2, where unsanitized user input in the 'GLOBALS' parameter can lead to arbitrary PHP code execution. The example URL demonstrates the attack vector but lacks executable exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][admin] parameter in (a) system/command/admin.cmd.php, (b) admin/include/upload_form.php, and (c) admin/include/item_main.php; and the (2) GLOBALS[_BIGACE][DIR][libs] parameter in (d) system/command/admin.cmd.php and (e) system/command/download.cmd.php.
Exploits (4)
The provided text describes a remote file inclusion vulnerability in Bigace 1.8.2, where unsanitized user input in the 'GLOBALS' parameter can lead to arbitrary PHP code execution. The example URL demonstrates the attack vector but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Bigace 1.8.2, where unsanitized user input in the 'GLOBALS' parameter can lead to arbitrary PHP code execution. The example URL demonstrates the vulnerability but does not include functional exploit code.
The code describes a remote file inclusion vulnerability in Bigace 1.8.2 due to improper input sanitization. An attacker can exploit this to execute arbitrary PHP code by manipulating the GLOBALS parameter in the download.cmd.php script.
This is a vulnerability writeup describing a remote file inclusion vulnerability in Bigace 1.8.2. It outlines the issue but does not provide functional exploit code.