Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-2355. PoCs published by Cr@zy_King.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in WR-Meeting v1.0 via the 'event' and 'msnum' parameters in index.php. The PoC shows how an attacker can include arbitrary files (e.g., config.php) by manipulating the input with directory traversal sequences.
Description
Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the msnum parameter in a coment event.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in WR-Meeting v1.0 via the 'event' and 'msnum' parameters in index.php. The PoC shows how an attacker can include arbitrary files (e.g., config.php) by manipulating the input with directory traversal sequences.