CVE-2008-2018
PHPizabi 0.848b C1 HFP3 - Authenticated Exposure of Sensitive Information via Macro Expansion
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2018. PoCs published by YOUCODE.
AI-analyzed exploit summary This writeup describes an information disclosure vulnerability in PHPizabi v0.848b C1 HFP3, where a specially crafted post can expose database fields, including user credentials. The exploit leverages a template replacement mechanism in template.class.php that inadvertently discloses database values when specific placeholders are used.
Description
The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters, which allows remote authenticated users to obtain sensitive information via a comment containing a macro, as demonstrated by a "{user.password}" comment in the profile of the admin user.
Exploits (1)
This writeup describes an information disclosure vulnerability in PHPizabi v0.848b C1 HFP3, where a specially crafted post can expose database fields, including user credentials. The exploit leverages a template replacement mechanism in template.class.php that inadvertently discloses database values when specific placeholders are used.