Exploitation Summary
EIP tracks 16 public exploits for CVE-2007-0900. PoCs published by K-159.
AI-analyzed exploit summary The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'configpath' and 'adminpath' parameters in 'tag_process.php'. An attacker can include arbitrary remote files, potentially leading to remote code execution.
Description
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) configpath parameter to (a) tagviewer.php, (b) tag_process.php, and (c) CONFIG/errmsg.inc.php; and (d) addTagmin.php, (e) ban_watch.php, (f) delTagmin.php, (g) delTag.php, (h) editTagmin.php, (i) editTag.php, (j) manageTagmins.php, and (k) verify.php in tagmin/; the (2) adminpath parameter to (l) tagviewer.php, (m) tag_process.php, and (n) tagmin/index.php; and the (3) admin parameter to (o) readconf.php, (p) updateconf.php, (q) updatefilter.php, and (r) wordfilter.php in tagmin/; different vectors than CVE-2006-5249.
Exploits (16)
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'configpath' and 'adminpath' parameters in 'tag_process.php'. An attacker can include arbitrary remote files, potentially leading to remote code execution.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard due to insufficient sanitization of user-supplied input in the 'configpath' and 'adminpath' parameters. An attacker can include and execute arbitrary remote files, potentially leading to remote code execution.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by injecting a malicious URL into the 'admin' parameter of wordfilter.php. This allows an attacker to include and execute arbitrary remote code due to insufficient input sanitization.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by injecting a malicious URL into the 'configpath' parameter of verify.php. This allows an attacker to execute arbitrary code by including a remote file.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'admin' parameter in updatefilter.php to include arbitrary remote files. This allows an attacker to execute malicious code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'admin' parameter in updateconf.php to include arbitrary remote files. This allows an attacker to execute malicious code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'admin' parameter in readconf.php to include arbitrary remote files. This allows an attacker to execute malicious code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard due to insufficient sanitization of user-supplied data in the 'configpath' parameter. An attacker can include and execute arbitrary remote files, potentially leading to remote code execution.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'adminpath' parameter in the URL to include a remote file. This allows an attacker to execute arbitrary code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'configpath' parameter in 'editTagmin.php' to include a remote file. This allows an attacker to execute arbitrary code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'configpath' parameter in 'editTag.php' to include a remote file. This allows an attacker to execute arbitrary code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by injecting a malicious URL into the 'configpath' parameter of 'delTagmin.php'. This allows an attacker to execute arbitrary code by including a remote file.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'configpath' parameter in 'delTag.php' to include a remote file. This allows an attacker to execute arbitrary code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by injecting a malicious URL into the 'configpath' parameter of 'ban_watch.phpp'. This allows an attacker to execute arbitrary code by including a remote file.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard by manipulating the 'configpath' parameter to include a remote file. This allows an attacker to execute arbitrary code on the target system.
The exploit demonstrates a remote file inclusion vulnerability in TagIt! TagBoard due to insufficient sanitization of user-supplied data in the 'configpath' parameter. An attacker can include and execute arbitrary remote files, potentially leading to remote code execution.