Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-7112. PoCs published by Kacper.
AI-analyzed exploit summary This exploit targets a vulnerability in MDPro <= 1.0.76 by leveraging a cookie-based language parameter to achieve remote code execution. It uploads a malicious GIF file containing PHP code to execute arbitrary commands on the target system.
Description
Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it.
Exploits (1)
This exploit targets a vulnerability in MDPro <= 1.0.76 by leveraging a cookie-based language parameter to achieve remote code execution. It uploads a malicious GIF file containing PHP code to execute arbitrary commands on the target system.