Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-5893. PoCs published by v1per-haCker.
AI-analyzed exploit summary This is a writeup describing a Remote File Inclusion (RFI) vulnerability in Storystream version 4. It provides URLs to exploit the vulnerability but does not include functional exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) mysql.php and (2) mysqli.php in include/classes/pear/DB/.
Exploits (1)
This is a writeup describing a Remote File Inclusion (RFI) vulnerability in Storystream version 4. It provides URLs to exploit the vulnerability but does not include functional exploit code.