CVE-2006-5620
MiniBILL 1.2.3 - Remote File Inclusion via config[page_dir] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5620. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in MiniBILL v2006-10-10. The vulnerability arises from improper handling of the 'config[page_dir]' parameter in the 'menu_builder.php' script, allowing an attacker to include arbitrary remote files.
Description
PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[page_dir] parameter, a different vector than CVE-2006-4489.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in MiniBILL v2006-10-10. The vulnerability arises from improper handling of the 'config[page_dir]' parameter in the 'menu_builder.php' script, allowing an attacker to include arbitrary remote files.