Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2935. PoCs published by Kacper.
AI-analyzed exploit summary This exploit targets a command injection vulnerability in Fundanemt <= 2.2.0 via the spellcheck.php file. It leverages improper input validation in the 'dict' parameter to execute arbitrary commands, either by writing a malicious PHP file to the /tmp directory or directly injecting commands into the ispell command.
Description
core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dict parameter.
Exploits (1)
This exploit targets a command injection vulnerability in Fundanemt <= 2.2.0 via the spellcheck.php file. It leverages improper input validation in the 'dict' parameter to execute arbitrary commands, either by writing a malicious PHP file to the /tmp directory or directly injecting commands into the ispell command.