CVE-2007-5313

Picturesolution < 2.1 - Remote Code Execution via Path Parameter in install/config.php

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5313. PoCs published by Mogatil.

AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Picturesolution <= v2.1 by manipulating the 'path' parameter in config.php to include a remote file (c99.txt). The vulnerability allows an attacker to execute arbitrary code by including a malicious file.

Description

PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mogatil · textwebappsphp

https://www.exploit-db.com/exploits/4492

View Code ZIP pw:eip

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Picturesolution <= v2.1 by manipulating the 'path' parameter in config.php to include a remote file (c99.txt). The vulnerability allows an attacker to execute arbitrary code by including a malicious file.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Picturesolution <= v2.1

No auth needed

Prerequisites: Remote file inclusion must be enabled on the target server · The target must be running Picturesolution <= v2.1

MITRE ATT&CK