Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6554. PoCs published by GoLd_M.
AI-analyzed exploit summary The exploit demonstrates multiple Remote File Inclusion (RFI) and Local File Inclusion (LFI) vulnerabilities in TeamCal Pro <= 3.1.000. It provides specific URLs with crafted parameters to exploit these vulnerabilities, allowing an attacker to include arbitrary remote or local files.
Description
Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) index.php, (2) register.php, (3) login.php, or (4) statistics.php.
Exploits (1)
The exploit demonstrates multiple Remote File Inclusion (RFI) and Local File Inclusion (LFI) vulnerabilities in TeamCal Pro <= 3.1.000. It provides specific URLs with crafted parameters to exploit these vulnerabilities, allowing an attacker to include arbitrary remote or local files.