CVE-2007-1514

ViperWeb Portal alpha 0.1 - Remote File Inclusion via modpath Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1514. PoCs published by Abdus Samad.

AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in Viper Web Portal due to insufficient sanitization of user-supplied input in the 'modpath' parameter. An attacker can include and execute arbitrary remote scripts, potentially leading to remote code execution.

Description

PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the modpath parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Abdus Samad · textwebappsphp

https://www.exploit-db.com/exploits/29744

View Code ZIP pw:eip

This exploit demonstrates a remote file inclusion vulnerability in Viper Web Portal due to insufficient sanitization of user-supplied input in the 'modpath' parameter. An attacker can include and execute arbitrary remote scripts, potentially leading to remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Viper Web Portal

No auth needed

Prerequisites: Remote script hosting location · Vulnerable Viper Web Portal instance

MITRE ATT&CK