Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-4605. PoCs published by SirDarckCat, Cold Zero.
AI-analyzed exploit summary This is a writeup detailing multiple vulnerabilities in Revista 1.1.2, including Remote File Inclusion, SQL Injection, Credentials Bypass, and XSS. It provides URLs for exploitation but lacks executable code.
Description
PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to execute arbitrary PHP code via the adodb parameter.
Exploits (2)
This is a writeup detailing multiple vulnerabilities in Revista 1.1.2, including Remote File Inclusion, SQL Injection, Credentials Bypass, and XSS. It provides URLs for exploitation but lacks executable code.
This exploit demonstrates a Remote File Include (RFI) vulnerability in php-revista <= 1.1.2, allowing an attacker to include arbitrary remote files via the 'adodb' parameter in multiple index.php files. The PoC provides URLs to trigger the vulnerability.