CVE-2006-5317
eboli - Remote File Inclusion via index.php contentSpecial Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5317. PoCs published by DarkFig.
AI-analyzed exploit summary This is a writeup describing a file inclusion vulnerability in the 'eboli' PHP script, where user-controlled input via $_GET['contentSpecial'] is passed directly to an include statement, allowing for remote file inclusion or source disclosure. The writeup includes a proof-of-concept URL demonstrating the vulnerability.
Description
PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the contentSpecial parameter.
Exploits (1)
This is a writeup describing a file inclusion vulnerability in the 'eboli' PHP script, where user-controlled input via $_GET['contentSpecial'] is passed directly to an include statement, allowing for remote file inclusion or source disclosure. The writeup includes a proof-of-concept URL demonstrating the vulnerability.