CVE-2006-6592
Bloq 0.5.4 - Remote File Inclusion via page[path] Parameter
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2006-6592. PoCs published by KorsaN.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Bloq version 0.5.4, where insufficient sanitization of user-supplied data in the 'page[path]' parameter allows remote code execution. The example URL demonstrates how an attacker could exploit this by including a malicious file.
Description
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the page[path] parameter to (1) index.php, (2) admin.php, (3) rss.php, (4) rdf.php, (5) rss2.php, or (6) files/mainfile.php.
Exploits (6)
The provided text describes a remote file inclusion vulnerability in Bloq version 0.5.4, where insufficient sanitization of user-supplied data in the 'page[path]' parameter allows remote code execution. The example URL demonstrates how an attacker could exploit this by including a malicious file.
The code describes a remote file inclusion vulnerability in Bloq version 0.5.4, where insufficient sanitization of user-supplied data allows an attacker to include remote files via the 'page[path]' parameter in rss.php. This could lead to remote code execution if the attacker controls the included file.
The provided text describes a remote file inclusion vulnerability in Bloq version 0.5.4, where insufficient sanitization of user-supplied data in the 'page[path]' parameter allows remote code execution. The example URL demonstrates how an attacker could include a remote file with arbitrary commands.
The provided text describes a remote file inclusion vulnerability in Bloq 0.5.4, where unsanitized user input in the 'page[path]' parameter allows arbitrary file inclusion. The example URL demonstrates how an attacker could execute commands via a remote file.
This exploit demonstrates a remote file inclusion vulnerability in Bloq 0.5.4 by injecting a malicious URL into the 'page[path]' parameter, allowing arbitrary command execution via a remote file.
The code describes a remote file inclusion vulnerability in Bloq 0.5.4 due to insufficient sanitization of user-supplied data in the 'page[path]' parameter. An attacker can exploit this to include remote files and execute arbitrary commands.