Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4945. PoCs published by ajann.
AI-analyzed exploit summary This is a writeup describing a remote file inclusion vulnerability in Digital WebShop v1.128. The exploit leverages the `_PHPLIB[libdir]` parameter to include arbitrary remote files, potentially leading to remote code execution.
Description
Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _PHPLIB[libdir] parameter to (1) rechnung.php or (2) prepend.php.
Exploits (1)
This is a writeup describing a remote file inclusion vulnerability in Digital WebShop v1.128. The exploit leverages the `_PHPLIB[libdir]` parameter to include arbitrary remote files, potentially leading to remote code execution.