CVE-2008-1856
LinPHA <= 1.3.3 - Unauthenticated Directory Traversal and Arbitrary File Execution via Maps Configuration
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-1856. PoCs published by EgiX.
AI-analyzed exploit summary This exploit leverages a Local File Inclusion (LFI) vulnerability in LinPHA <= 1.3.3's maps plugin to achieve Remote Command Execution (RCE). It manipulates the 'maps_type' configuration to include the ChangeLog file, which contains executable PHP code, allowing arbitrary command execution via a crafted GET request.
Description
plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into the maps_type configuration setting, and then sending a request to maps_view.php, which causes plugins/maps/map.main.class.php to use the modified configuration.
Exploits (1)
This exploit leverages a Local File Inclusion (LFI) vulnerability in LinPHA <= 1.3.3's maps plugin to achieve Remote Command Execution (RCE). It manipulates the 'maps_type' configuration to include the ChangeLog file, which contains executable PHP code, allowing arbitrary command execution via a crafted GET request.