CVE-2006-6086

e-ark 1.0 - Remote Code Execution via cfg_pear_path Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-6086. PoCs published by DeltahackingTEAM.

AI-analyzed exploit summary This exploit targets a remote file inclusion vulnerability in e-Ark project (CVE-2006-6086) by injecting a malicious URL into the `cfg_pear_path` parameter, allowing arbitrary command execution via a remote PHP shell. The script uses LWP::UserAgent to send HTTP requests and interact with the compromised system.

Description

PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_pear_path parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by DeltahackingTEAM · pythonwebappsphp

https://www.exploit-db.com/exploits/2818

View Code ZIP pw:eip

This exploit targets a remote file inclusion vulnerability in e-Ark project (CVE-2006-6086) by injecting a malicious URL into the `cfg_pear_path` parameter, allowing arbitrary command execution via a remote PHP shell. The script uses LWP::UserAgent to send HTTP requests and interact with the compromised system.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: e-Ark project 1.0

No auth needed

Prerequisites: Remote PHP shell accessible via HTTP · Network access to the target

MITRE ATT&CK