CVE-2008-2905
Mambo < 4.6.4 - Remote Code Execution via mosConfig_absolute_path Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-2905.
PoCs published by Metasploit, MC, irk4z, including Metasploit module exploits/unix/webapp/mambo_cache_lite.
AI-analyzed exploit summary This is a Metasploit module exploiting a remote file inclusion vulnerability in Mambo CMS (CVE-2008-2905). It leverages the `mosConfig_absolute_path` parameter in `Output.php` to include a malicious PHP payload, leading to remote code execution.
Description
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Exploits (4)
This is a Metasploit module exploiting a remote file inclusion vulnerability in Mambo CMS (CVE-2008-2905). It leverages the `mosConfig_absolute_path` parameter in `Output.php` to include a malicious PHP payload, leading to remote code execution.
This is a Metasploit module exploiting a remote file inclusion vulnerability in Mambo CMS via the Cache_Lite package. It leverages the mosConfig_absolute_path parameter to include a remote PHP payload.
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Mambo CMS <= 4.6.4. The vulnerability exists in the `Output.php` file due to improper handling of the `mosConfig_absolute_path` parameter, allowing an attacker to include arbitrary remote files.
This Metasploit module exploits a remote file inclusion vulnerability in Mambo CMS by manipulating the `mosConfig_absolute_path` parameter in the Cache_Lite package. It sends a crafted HTTP request to include a remote PHP payload, leading to remote code execution.