Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-5802. PoCs published by KiNgOfThEwOrLd.
AI-analyzed exploit summary This is a writeup detailing Local File Inclusion (LFI) and Full Path Disclosure vulnerabilities in Synergiser CMS <= 1.2 RC1. It explains how to exploit the 'page' parameter for directory traversal and path disclosure via function redeclaration errors.
Description
Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a duplicate function declaration.
Exploits (2)
This is a writeup detailing Local File Inclusion (LFI) and Full Path Disclosure vulnerabilities in Synergiser CMS <= 1.2 RC1. It explains how to exploit the 'page' parameter for directory traversal and path disclosure via function redeclaration errors.
The exploit describes a local file inclusion (LFI) vulnerability in Synergiser 1.2 RC1 due to improper input sanitization. It allows unauthorized file access via path traversal in the 'page' parameter.