CVE-2006-5165
Skrypty PPA Gallery < 1.0 - Remote File Inclusion via config[ppa_root_path] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5165. PoCs published by Kacper.
AI-analyzed exploit summary This exploit targets a remote file include vulnerability in PPA Gallery <= 1.0, allowing an attacker to include a malicious PHP shell via the 'config[ppa_root_path]' parameter. The PoC generates a shell.txt file with command execution capabilities and attempts to include it in the vulnerable application.
Description
PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[ppa_root_path] parameter.
Exploits (1)
This exploit targets a remote file include vulnerability in PPA Gallery <= 1.0, allowing an attacker to include a malicious PHP shell via the 'config[ppa_root_path]' parameter. The PoC generates a shell.txt file with command execution capabilities and attempts to include it in the vulnerable application.