CVE-2006-6710
PgmReloaded < 0.8.5 - Remote Code Execution via PHP File Inclusion
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-6710. PoCs published by nuffsaid.
AI-analyzed exploit summary This exploit demonstrates multiple remote file inclusion vulnerabilities in PgmReloaded <= 0.8.5. The vulnerabilities allow an attacker to include and execute arbitrary remote PHP files by manipulating uninitialized variables in query strings.
Description
Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to (a) index.php, the (2) CFG[libdir] and (3) CFG[localedir] parameters to (b) common.inc.php, and the CFG[localelangdir] parameter to (c) form_header.php.
Exploits (1)
This exploit demonstrates multiple remote file inclusion vulnerabilities in PgmReloaded <= 0.8.5. The vulnerabilities allow an attacker to include and execute arbitrary remote PHP files by manipulating uninitialized variables in query strings.