Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-5930. PoCs published by navairum.
AI-analyzed exploit summary The exploit demonstrates a file inclusion vulnerability in Aigaion's _basicfunctions.php due to an unspecified $DIR variable, allowing remote file inclusion via crafted HTTP requests.
Description
Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to (1) _basicfunctions.php, or (2) pageactionauthor.php.
Exploits (1)
The exploit demonstrates a file inclusion vulnerability in Aigaion's _basicfunctions.php due to an unspecified $DIR variable, allowing remote file inclusion via crafted HTTP requests.