Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-0459. PoCs published by Stack.
AI-analyzed exploit summary This is a writeup describing a Local File Inclusion (LFI) vulnerability in Liquid-Silver CMS. It provides an exploit path and examples for reading arbitrary files, including system files like /etc/passwd, by manipulating the 'update' parameter in the index.php script.
Description
Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the update parameter.
Exploits (1)
This is a writeup describing a Local File Inclusion (LFI) vulnerability in Liquid-Silver CMS. It provides an exploit path and examples for reading arbitrary files, including system files like /etc/passwd, by manipulating the 'update' parameter in the index.php script.