CVE-2006-4890

UNAK-CMS <= 1.5 - Remote File Inclusion via dirroot Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4890. PoCs published by SHiKaA.

AI-analyzed exploit summary This exploit targets a Remote File Inclusion (RFI) vulnerability in UNAK-CMS <= v1.5 via the 'dirroot' parameter in 'fck_link.php'. The PoC demonstrates how an attacker can include a remote shell by manipulating the 'dirroot' parameter to execute arbitrary commands.

Description

Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or (2) fckeditor/editor/dialog/fck_link.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by SHiKaA · textwebappsphp

https://www.exploit-db.com/exploits/2380

View Code ZIP pw:eip

This exploit targets a Remote File Inclusion (RFI) vulnerability in UNAK-CMS <= v1.5 via the 'dirroot' parameter in 'fck_link.php'. The PoC demonstrates how an attacker can include a remote shell by manipulating the 'dirroot' parameter to execute arbitrary commands.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: UNAK-CMS <= v1.5

No auth needed

Prerequisites: Target must have UNAK-CMS <= v1.5 installed · Remote file inclusion must be enabled on the server · Attacker must have a remote shell or script to include

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →