CVE-2008-1170
KCWiki 1.0 - Remote Code Execution via Page Parameter File Inclusion
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-1170. PoCs published by muuratsalo.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in KC Wiki 1.0, where unsanitized user input allows arbitrary remote file inclusion. The example URL demonstrates how an attacker could exploit this to execute malicious PHP code.
Description
Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to (1) minimal/wiki.php and (2) simplest/wiki.php.
Exploits (2)
The provided text describes a remote file inclusion vulnerability in KC Wiki 1.0, where unsanitized user input allows arbitrary remote file inclusion. The example URL demonstrates how an attacker could exploit this to execute malicious PHP code.
The provided text describes a remote file inclusion vulnerability in KC Wiki 1.0, where unsanitized user input allows arbitrary remote file inclusion. The example URL demonstrates how an attacker could exploit this to execute malicious PHP code.