Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6347. PoCs published by RoMaNcYxHaCkEr.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in ViArt CMS 3.3.2 by manipulating the 'root_folder_path' parameter to include a remote shell. The vulnerability arises from insecure file inclusion in the 'block_site_map.php' file.
Description
PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the root_folder_path parameter. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in ViArt CMS 3.3.2 by manipulating the 'root_folder_path' parameter to include a remote shell. The vulnerability arises from insecure file inclusion in the 'block_site_map.php' file.