CVE-2008-0300
Mapbender 2.4-2.4.4 - Remote Code Execution via mapFiler.php Factor Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0300. PoCs published by RedTeam Pentesting.
AI-analyzed exploit summary This exploit demonstrates a remote command execution vulnerability in Mapbender versions 2.4 to 2.4.4. It leverages insufficient input filtering in the `mapFiler.php` script to write arbitrary PHP code to a file, which can then be executed by accessing the file via a web request.
Description
mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.
Exploits (1)
This exploit demonstrates a remote command execution vulnerability in Mapbender versions 2.4 to 2.4.4. It leverages insufficient input filtering in the `mapFiler.php` script to write arbitrary PHP code to a file, which can then be executed by accessing the file via a web request.