CVE-2007-0580

Foro Domus 2.10 - Remote File Inclusion via sesion_idioma Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-0580. PoCs published by Mehmet Ince.

AI-analyzed exploit summary This exploit targets a remote file inclusion vulnerability in Foro Domus v2.10 by injecting a malicious URL into the 'menu.php' script via the 'sesion_idioma' parameter. It allows remote command execution by fetching and executing arbitrary code from an external server.

Description

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesion_idioma parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mehmet Ince · perlwebappsphp

https://www.exploit-db.com/exploits/3215

View Code ZIP pw:eip

This exploit targets a remote file inclusion vulnerability in Foro Domus v2.10 by injecting a malicious URL into the 'menu.php' script via the 'sesion_idioma' parameter. It allows remote command execution by fetching and executing arbitrary code from an external server.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Foro Domus v2.10

No auth needed

Prerequisites: Target must have Foro Domus v2.10 installed · Remote file inclusion must be enabled on the target server · Attacker must be able to reach the target server

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →