Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4908. PoCs published by k1tk4t.
AI-analyzed exploit summary This exploit demonstrates a remote file attachment vulnerability in AuraCMS 2.1, allowing arbitrary file uploads to the '/files/' directory, and a local file inclusion vulnerability due to improper input validation in 'index.php'. The PoC includes steps to upload a shell and access sensitive files via path traversal.
Description
Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pilih parameter.
Exploits (1)
This exploit demonstrates a remote file attachment vulnerability in AuraCMS 2.1, allowing arbitrary file uploads to the '/files/' directory, and a local file inclusion vulnerability due to improper input validation in 'index.php'. The PoC includes steps to upload a shell and access sensitive files via path traversal.