CVE-2006-5125
phpMyWebmin 1.0 - Directory Traversal via Window.php Target Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-5125. PoCs published by Kernel-32.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in PHP MyWebMin 1.0. The vulnerable parameters 'target' and 'action' in window.php allow an attacker to include arbitrary files, potentially leading to remote code execution.
Description
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
Exploits (2)
This exploit demonstrates a remote file inclusion vulnerability in PHP MyWebMin 1.0. The vulnerable parameters 'target' and 'action' in window.php allow an attacker to include arbitrary files, potentially leading to remote code execution.
The exploit demonstrates a Remote File Include (RFI) vulnerability in phpMyWebmin 1.0 by manipulating the 'target' parameter in multiple scripts to include arbitrary remote PHP files. The vulnerability arises from unsanitized user input in the 'include' function.