CVE-2006-5241

OpenDock Easy Gallery < 1.4 - Remote File Inclusion via doc_directory Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5241. PoCs published by the_day.

AI-analyzed exploit summary This is a vulnerability writeup for CVE-2006-5241, detailing a remote file inclusion vulnerability in OpenDock Easy Gallery <=1.4. The vulnerability allows arbitrary PHP code execution by manipulating the $doc_directory parameter in multiple files.

Description

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) file.php; (2) find_user.php, (3) lib_user.php, (4) lib_form_user.php, and (5) user.php in sw/lib_user/; (6) find_session.php and (7) session.php in sw/lib_session/; (8) comment.php and (9) lib_comment.php in sw/lib_comment/; and other unspecified PHP scripts.

Exploits (1)

exploitdb WRITEUP VERIFIED

by the_day · textwebappsphp

https://www.exploit-db.com/exploits/2497

View Code ZIP pw:eip

This is a vulnerability writeup for CVE-2006-5241, detailing a remote file inclusion vulnerability in OpenDock Easy Gallery <=1.4. The vulnerability allows arbitrary PHP code execution by manipulating the $doc_directory parameter in multiple files.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: OpenDock Easy Gallery <=1.4

No auth needed

Prerequisites: Network access to the target application · Ability to host a malicious file on an external server

MITRE ATT&CK