CVE-2007-2947
OpenBASE Alpha 0.6 - Remote File Inclusion via root_prefix Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2947. PoCs published by DeltahackingTEAM.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in OpenBASE Alpha 0.6. The vulnerability arises from insecure handling of the `root_prefix` parameter, allowing an attacker to include and execute remote shellcode.
Description
Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the root_prefix parameter to (1) index.php, (2) email_subscribe.php, (3) download.php, or (4) development.php.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in OpenBASE Alpha 0.6. The vulnerability arises from insecure handling of the `root_prefix` parameter, allowing an attacker to include and execute remote shellcode.