CVE-2006-6879
php-update < 2.7 - Authenticated Arbitrary File Upload via userfile Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-6879. PoCs published by rgod, undefined1_.
AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in PHP-Update <= 2.7 via the `str_replace()` function in the guestbook feature. It extracts admin credentials, uploads a malicious PHP file, and executes arbitrary commands on the target system.
Description
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitrary PHP scripts to the gfx/ and files/ directories via the userfile parameter.
Exploits (2)
This exploit leverages a SQL injection vulnerability in PHP-Update <= 2.7 via the `str_replace()` function in the guestbook feature. It extracts admin credentials, uploads a malicious PHP file, and executes arbitrary commands on the target system.
This exploit targets a file upload vulnerability in PHP-Update 2.7, allowing remote code execution by uploading a malicious PHP shell. The script interacts with the uploaded shell to execute arbitrary commands on the target system.