CVE-2007-2141
ShoutPro < 1.5.2 - Remote Code Execution via Shout Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2141. PoCs published by Gammarays.
AI-analyzed exploit summary This exploit targets a PHP code injection vulnerability in ShoutPro 1.5.2 by writing arbitrary PHP code to the shouts.php file. It deploys a temporary payload to write a file and a main payload to execute commands, then cleans up by removing the temporary file.
Description
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter.
Exploits (1)
This exploit targets a PHP code injection vulnerability in ShoutPro 1.5.2 by writing arbitrary PHP code to the shouts.php file. It deploys a temporary payload to write a file and a main payload to execute commands, then cleans up by removing the temporary file.