Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-3431. PoCs published by Katatafish.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in Dagger-web engine's cal.func.php due to improper input validation of the dir_edge_lang parameter. An attacker can include a remote shell by manipulating the parameter.
Description
PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows remote attackers to execute arbitrary PHP code via a URL in the dir_edge_lang parameter.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in Dagger-web engine's cal.func.php due to improper input validation of the dir_edge_lang parameter. An attacker can include a remote shell by manipulating the parameter.