CVE-2007-2330
DynaTracker 151 - Remote File Inclusion via base_path Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-2330. PoCs published by alijsb.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in DynaTracker 1.5.1 due to insufficient sanitization of the 'base_path' parameter in includes_handler.php. An attacker can leverage this to execute arbitrary code by including a remote shell.
Description
PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
Exploits (2)
This exploit demonstrates a remote file inclusion vulnerability in DynaTracker 1.5.1 due to insufficient sanitization of the 'base_path' parameter in includes_handler.php. An attacker can leverage this to execute arbitrary code by including a remote shell.
This exploit demonstrates a remote file inclusion vulnerability in DynaTracker 1.5.1 by manipulating the 'base_path' parameter in action.php to include a remote shell. The vulnerability arises from insufficient sanitization of user-supplied input.