CVE-2007-2900

Scallywag 2005-04-25 - Remote Code Execution via Path Parameter in Template.php

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2900. PoCs published by Mehmet Ince.

AI-analyzed exploit summary This is a writeup describing a Remote File Inclusion (RFI) vulnerability in Scallywag software. It identifies vulnerable files and provides examples of exploit URLs but does not include executable exploit code.

Description

Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Mehmet Ince · textwebappsphp

https://www.exploit-db.com/exploits/3972

View Code ZIP pw:eip

This is a writeup describing a Remote File Inclusion (RFI) vulnerability in Scallywag software. It identifies vulnerable files and provides examples of exploit URLs but does not include executable exploit code.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Theoretical

Target: Scallywag <= (version not specified)

No auth needed

Prerequisites: A vulnerable version of Scallywag · Ability to send HTTP requests to the target server

MITRE ATT&CK