Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6129. PoCs published by Crackers_Child.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Amber Script 1.0 by manipulating the 'id' parameter in 'show_content.php' with a null byte (%00) to bypass file inclusion restrictions.
Description
Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Amber Script 1.0 by manipulating the 'id' parameter in 'show_content.php' with a null byte (%00) to bypass file inclusion restrictions.