CVE-2006-4885
Shadowed Portal < 5.599 - Remote File Inclusion via Root Parameter in Footer and Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4885. PoCs published by mad_hacker.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in Shadowed Portal 5.599 due to insecure use of the 'require' function with user-controlled input. The PoC shows how an attacker can include a remote file by manipulating the 'root' parameter in the 'bottom.php' script.
Description
PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The bottom.php parameter is already covered by CVE-2006-4826.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in Shadowed Portal 5.599 due to insecure use of the 'require' function with user-controlled input. The PoC shows how an attacker can include a remote file by manipulating the 'root' parameter in the 'bottom.php' script.