CVE-2007-5321

Verlihub Control Panel <= 1.7 - Path Traversal via Page Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5321. PoCs published by TEAMELITE.

AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Verlihub Control Panel v1.7 due to improper input validation in the 'page' parameter. The attack leverages path traversal to read arbitrary files (e.g., /etc/passwd) when magic_quotes_gpc is disabled and ini_set is not restricted.

Description

Directory traversal vulnerability in index.php in Verlihub Control Panel (VHCP) 1.7 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the page parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by TEAMELITE · textwebappsphp

https://www.exploit-db.com/exploits/4494

View Code ZIP pw:eip

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Verlihub Control Panel v1.7 due to improper input validation in the 'page' parameter. The attack leverages path traversal to read arbitrary files (e.g., /etc/passwd) when magic_quotes_gpc is disabled and ini_set is not restricted.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Verlihub Control Panel v1.7

No auth needed

Prerequisites: magic_quotes_gpc disabled · ini_set not disabled

MITRE ATT&CK