CVE-2006-5555
EPNadmin 0.7 and 0.7.1 - Remote File Inclusion via Langage Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5555. PoCs published by Kw3[R]Ln.
AI-analyzed exploit summary This Perl script exploits a remote command execution vulnerability in EPNadmin 0.7 by injecting a malicious URL parameter to fetch and execute commands from a remote shell script. It leverages LWP::Simple to send HTTP requests with crafted parameters.
Description
PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP code via the langage parameter.
Exploits (1)
This Perl script exploits a remote command execution vulnerability in EPNadmin 0.7 by injecting a malicious URL parameter to fetch and execute commands from a remote shell script. It leverages LWP::Simple to send HTTP requests with crafted parameters.