CVE-2006-4723

raidenhttpd 1.1.49 - Remote File Inclusion via SoftParserFileXml Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4723. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets a file inclusion vulnerability in RaidenHTTPD 1.1.49, allowing remote command execution via arbitrary file inclusion in the 'SoftParserFileXml' parameter. It leverages PHP's allow_url_fopen and register_globals being enabled by default.

Description

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpremotewindows

https://www.exploit-db.com/exploits/2328

View Code ZIP pw:eip

This exploit targets a file inclusion vulnerability in RaidenHTTPD 1.1.49, allowing remote command execution via arbitrary file inclusion in the 'SoftParserFileXml' parameter. It leverages PHP's allow_url_fopen and register_globals being enabled by default.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: RaidenHTTPD 1.1.49

No auth needed

Prerequisites: PHP 4.4.1 with register_globals and allow_url_fopen enabled · Access to /raidenhttpd-admin/slice/check.php

MITRE ATT&CK