CVE-2006-5910
Campware Campsite - Remote File Inclusion via g_documentRoot Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5910. PoCs published by Kw3[R]Ln.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in CampSite - BugReporter <= 2.6.1 due to unsanitized $g_documentRoot variable when register_globals is enabled. An attacker can inject a malicious PHP script via the thankyou.php URL parameter.
Description
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in CampSite - BugReporter <= 2.6.1 due to unsanitized $g_documentRoot variable when register_globals is enabled. An attacker can inject a malicious PHP script via the thankyou.php URL parameter.