CVE-2006-5494
PHP-Nuke pandaBB module - Remote Code Execution via adminpath or basepath Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5494. PoCs published by nukedclx.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in pandaBB's My_eGallery module. By manipulating the 'adminpath' or 'basepath' parameters, an attacker can include arbitrary remote files, potentially leading to remote code execution.
Description
Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters. NOTE: this issue might overlap CVE-2006-6795.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in pandaBB's My_eGallery module. By manipulating the 'adminpath' or 'basepath' parameters, an attacker can include arbitrary remote files, potentially leading to remote code execution.