CVE-2006-6864

Enigma2 Coppermine Bridge 1.0 - RCE

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-6864. PoCs published by Mehmet Ince.

AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in Enigma Coppermine Bridge due to improper input validation in the 'boarddir' parameter. An attacker can include arbitrary remote files by manipulating the parameter in the 'E2_header.inc.php' script.

Description

PHP remote file inclusion vulnerability in E2_header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mehmet Ince · textwebappsphp

https://www.exploit-db.com/exploits/3050

View Code ZIP pw:eip

This exploit demonstrates a remote file inclusion vulnerability in Enigma Coppermine Bridge due to improper input validation in the 'boarddir' parameter. An attacker can include arbitrary remote files by manipulating the parameter in the 'E2_header.inc.php' script.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Enigma Coppermine Bridge

No auth needed

Prerequisites: Remote file inclusion must be enabled on the target server · Attacker-controlled server to host malicious script

MITRE ATT&CK