CVE-2006-5124
phpMyWebmin 1.0 - Remote File Inclusion via URL Parameter Injection
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-5124. PoCs published by Kernel-32.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in PHP MyWebMin 1.0. The vulnerable parameters 'target' and 'action' in window.php allow an attacker to include arbitrary files, potentially leading to remote code execution.
Description
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) target and (2) action parameters in window.php, and possibly the (3) target parameter in home.php.
Exploits (2)
This exploit demonstrates a remote file inclusion vulnerability in PHP MyWebMin 1.0. The vulnerable parameters 'target' and 'action' in window.php allow an attacker to include arbitrary files, potentially leading to remote code execution.
The exploit demonstrates a Remote File Include (RFI) vulnerability in phpMyWebmin 1.0, where the 'target' parameter in multiple scripts is used unsafely in an include statement, allowing remote code execution by including a malicious PHP file.