CVE-2008-2912
Contenido CMS 4.8.4 - Remote Code Execution via Multiple PHP File Inclusion Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2912. PoCs published by RoMaNcYxHaCkEr.
AI-analyzed exploit summary This exploit demonstrates multiple RFI (Remote File Inclusion) and XSS (Cross-Site Scripting) vulnerabilities in Contenido CMS version 4.8.4. The RFI vulnerabilities allow remote code execution by including malicious files via manipulated parameters, while the XSS vulnerability enables arbitrary JavaScript execution.
Description
Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the (1) contenido_path parameter to (a) contenido/backend_search.php; the (2) cfg[path][contenido] parameter to (b) move_articles.php, (c) move_old_stats.php, (d) optimize_database.php, (e) run_newsletter_job.php, (f) send_reminder.php, (g) session_cleanup.php, and (h) setfrontenduserstate.php in contenido/cronjobs/, and (i) includes/include.newsletter_jobs_subnav.php and (j) plugins/content_allocation/includes/include.right_top.php in contenido/; the (3) cfg[path][templates] parameter to (k) includes/include.newsletter_jobs_subnav.php and (l) plugins/content_allocation/includes/include.right_top.php in contenido/; and the (4) cfg[templates][right_top_blank] parameter to (m) plugins/content_allocation/includes/include.right_top.php and (n) contenido/includes/include.newsletter_jobs_subnav.php in contenido/, different vectors than CVE-2006-5380.
Exploits (1)
This exploit demonstrates multiple RFI (Remote File Inclusion) and XSS (Cross-Site Scripting) vulnerabilities in Contenido CMS version 4.8.4. The RFI vulnerabilities allow remote code execution by including malicious files via manipulated parameters, while the XSS vulnerability enables arbitrary JavaScript execution.