CVE-2007-3160

PHP Real Estate Classifieds Premium Plus - RCE

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3160. PoCs published by not sec group.

AI-analyzed exploit summary This is a client-side HTML/JavaScript exploit for CVE-2007-3160, targeting a remote file inclusion vulnerability in PHP Real Estate Classifieds Premium Plus. It constructs a malicious URL to include a remote shell via the 'loc' parameter in 'header.php'.

Description

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by not sec group · htmlwebappsphp

https://www.exploit-db.com/exploits/4055

View Code ZIP pw:eip

This is a client-side HTML/JavaScript exploit for CVE-2007-3160, targeting a remote file inclusion vulnerability in PHP Real Estate Classifieds Premium Plus. It constructs a malicious URL to include a remote shell via the 'loc' parameter in 'header.php'.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: PHP Real Estate Classifieds Premium Plus

No auth needed

Prerequisites: Target must have the vulnerable software installed · Remote shell must be accessible via URL

MITRE ATT&CK