Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4498. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Portail PHP mod_phpalbum 2.15. The vulnerability arises from insecure inclusion of a remote file via the 'chemin' parameter in 'sommaire_admin.php'.
Description
PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Portail PHP mod_phpalbum 2.15. The vulnerability arises from insecure inclusion of a remote file via the 'chemin' parameter in 'sommaire_admin.php'.