CVE-2008-0645
Portail Web Php 2.5.1.1 - Remote Code Execution via site_path Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-0645. PoCs published by Psiczn.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Portail Web Php 2.5.1.1, where unsanitized user input in the 'site_path' parameter allows arbitrary file inclusion. No actual exploit code is present, only a description and example URL.
Description
Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, and (3) modules/conf_modules.php in admin/system/; and (4) system/login.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (4)
The provided text describes a remote file inclusion vulnerability in Portail Web Php 2.5.1.1, where unsanitized user input in the 'site_path' parameter allows arbitrary file inclusion. No actual exploit code is present, only a description and example URL.
The provided text describes a remote file inclusion vulnerability in Portail Web Php 2.5.1.1 due to insufficient sanitization of user-supplied data. It includes an example URL demonstrating the exploit but lacks executable code.
The code describes a remote file inclusion vulnerability in Portail Web Php 2.5.1.1 due to insufficient sanitization of user-supplied data. It provides an example URL demonstrating how an attacker could exploit this to include remote files.
The code describes a remote file inclusion vulnerability in Portail Web Php 2.5.1.1 due to insufficient sanitization of user-supplied data. The example URL demonstrates how an attacker could exploit this by injecting a malicious site_path parameter.