Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-2887. PoCs published by cOndemned.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in FubarForum v1.5 due to improper sanitization of the 'page' parameter in index.php. The vulnerability allows an attacker to include arbitrary local files by using directory traversal sequences and a null byte (%00) to bypass file extension checks.
Description
Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in FubarForum v1.5 due to improper sanitization of the 'page' parameter in index.php. The vulnerability allows an attacker to include arbitrary local files by using directory traversal sequences and a null byte (%00) to bypass file extension checks.