CVE-2006-4656

Web Provence SL_Site < 1.0 - Remote File Inclusion via spaw_root Parameter

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2006-4656. PoCs published by Kw3[R]Ln.

AI-analyzed exploit summary The exploit describes a remote file inclusion vulnerability in SL_Site <= 1.0 due to an unsanitized $spaw_root variable when register_globals is enabled. The attacker can inject a malicious script via the spaw_root parameter in the spaw_control.class.php file.

Description

PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PHP Edition.

Exploits (2)

exploitdb WRITEUP VERIFIED

by Kw3[R]Ln · textwebappsphp

https://www.exploit-db.com/exploits/2317

View Code ZIP pw:eip

The exploit describes a remote file inclusion vulnerability in SL_Site <= 1.0 due to an unsanitized $spaw_root variable when register_globals is enabled. The attacker can inject a malicious script via the spaw_root parameter in the spaw_control.class.php file.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: SL_Site 1.0

No auth needed

Prerequisites: register_globals=on · access to the vulnerable URL path

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

exploitdb WORKING POC

webappsphp

https://www.exploit-db.com/exploits/2521

View Code ZIP pw:eip

This exploit demonstrates a Remote File Include (RFI) vulnerability in Download-Engine 1.4.2. The vulnerability allows an attacker to include and execute arbitrary remote files by manipulating the 'spaw_root' parameter in the 'spaw_control.class.php' script.