Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-5636. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This exploit demonstrates a Remote File Include (RFI) vulnerability in Simple Website Software v0.99 by manipulating the SWSDIR parameter in common.php. The attacker can include arbitrary remote files by setting SWSDIR to a malicious URL.
Description
PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter.
Exploits (1)
This exploit demonstrates a Remote File Include (RFI) vulnerability in Simple Website Software v0.99 by manipulating the SWSDIR parameter in common.php. The attacker can include arbitrary remote files by setting SWSDIR to a malicious URL.