CVE-2006-4750

openi-cms 1.0.1 - Remote File Inclusion via config[openi_dir] Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4750. PoCs published by basher13.

AI-analyzed exploit summary The exploit describes a remote file inclusion vulnerability in OPENi-CMS 1.0.1 due to improper validation of the 'config[openi_dir]' parameter in fileloader.php. Attackers can include arbitrary remote files by manipulating the parameter.

Description

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[openi_dir] parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by basher13 · textwebappsphp

https://www.exploit-db.com/exploits/2344

View Code ZIP pw:eip

The exploit describes a remote file inclusion vulnerability in OPENi-CMS 1.0.1 due to improper validation of the 'config[openi_dir]' parameter in fileloader.php. Attackers can include arbitrary remote files by manipulating the parameter.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: OPENi-CMS 1.0.1

No auth needed

Prerequisites: Network access to the target application · PHP remote file inclusion enabled on the server

MITRE ATT&CK