Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-3150. PoCs published by Ams.
AI-analyzed exploit summary This exploit targets Neutrino 0.8.4 Atomic Edition by manipulating the '/data/sess.php' file to bypass authorization, then uploads a PHP shell to '/data/pages/'. It uses HTTP POST requests to achieve remote code execution.
Description
Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php.
Exploits (1)
This exploit targets Neutrino 0.8.4 Atomic Edition by manipulating the '/data/sess.php' file to bypass authorization, then uploads a PHP shell to '/data/pages/'. It uses HTTP POST requests to achieve remote code execution.