Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6567. PoCs published by Kw3[R]Ln.
AI-analyzed exploit summary This Perl script exploits a Local File Inclusion (LFI) vulnerability in XZero Community Classifieds <= v4.95.11 by injecting PHP code into Apache log files and then including them via the LFI vulnerability to achieve remote command execution.
Description
Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter in a page view action.
Exploits (1)
This Perl script exploits a Local File Inclusion (LFI) vulnerability in XZero Community Classifieds <= v4.95.11 by injecting PHP code into Apache log files and then including them via the LFI vulnerability to achieve remote command execution.