Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-5100. PoCs published by ThE-WoLf-KsA.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in WebNews <= v1.4 due to improper input validation in the WN_BASEDIR parameter in parse/parser.php. An attacker can include arbitrary remote files by manipulating the WN_BASEDIR parameter.
Description
PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in WebNews <= v1.4 due to improper input validation in the WN_BASEDIR parameter in parse/parser.php. An attacker can include arbitrary remote files by manipulating the WN_BASEDIR parameter.