CVE-2008-1511
CRITICALooComments 1.0 - Remote File Inclusion via PathToComment Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-1511. PoCs published by ZoRLu.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in ooComments 1.0, where insufficient sanitization of user-supplied data in the 'PathToComment' parameter allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for (1) classes/class_admin.php and (2) classes/class_comments.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (2)
The provided text describes a remote file inclusion vulnerability in ooComments 1.0, where insufficient sanitization of user-supplied data in the 'PathToComment' parameter allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in ooComments 1.0, where insufficient sanitization of user-supplied data in the 'PathToComment' parameter allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H