CVE-2007-2596
aForum < 1.32 - Remote File Inclusion via CommonAbsDir Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2596. PoCs published by ThE TiGeR.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in AForum <=1.33 by manipulating the 'CommonAbsDir' parameter in 'func.php' to include a remote shell. The attack requires the target server to have 'allow_url_include' enabled in PHP.
Description
PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CommonAbsDir parameter.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in AForum <=1.33 by manipulating the 'CommonAbsDir' parameter in 'func.php' to include a remote shell. The attack requires the target server to have 'allow_url_include' enabled in PHP.