CVE-2007-4763
PHP Object Framework < 20040226 - Remote Code Execution via PHPOF_INCLUDE_PATH Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-4763. PoCs published by ThE TiGeR.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in PHPOF by manipulating the PHPOF_INCLUDE_PATH parameter to include a remote shell. The vulnerability allows arbitrary code execution if the attacker can host a malicious file.
Description
PHP remote file inclusion vulnerability in dbmodules/DB_adodb.class.php in PHP Object Framework (PHPOF) 20040226 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPOF_INCLUDE_PATH parameter.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in PHPOF by manipulating the PHPOF_INCLUDE_PATH parameter to include a remote shell. The vulnerability allows arbitrary code execution if the attacker can host a malicious file.