CVE-2006-5076

The code describes a remote file inclusion vulnerability in Back-End CMS 0.4.5 due to improper input sanitization. An attacker can exploit this by manipulating the 'includes_path' parameter in search.php to execute arbitrary server-side script code.

The code describes a remote file inclusion vulnerability in Back-End CMS 0.4.5 due to improper input sanitization. An attacker can exploit this by manipulating the 'includes_path' parameter to execute arbitrary server-side script code.

This exploit leverages a remote file inclusion vulnerability in Back-End CMS 0.4.5 by injecting a malicious URL into the 'includes_path' parameter, allowing arbitrary command execution via a remote shell script. The PoC sends HTTP requests to execute commands fetched from an attacker-controlled server.