CVE-2008-3384

Interact Learning Community Environment Interact 2.4.1 - Path Traversal via Help Module and File Parameters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-3384. PoCs published by DSecRG.

AI-analyzed exploit summary This exploit demonstrates a Local File Include (LFI) vulnerability in Interact E-Learning System 2.4.1. The vulnerability allows an attacker to include arbitrary files via the 'module' and 'file' GET parameters in help/help.php.

Description

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) module and (2) file parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by DSecRG · textwebappsphp

https://www.exploit-db.com/exploits/6107

View Code ZIP pw:eip

This exploit demonstrates a Local File Include (LFI) vulnerability in Interact E-Learning System 2.4.1. The vulnerability allows an attacker to include arbitrary files via the 'module' and 'file' GET parameters in help/help.php.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Interact E-Learning System 2.4.1

No auth needed

Prerequisites: Access to the help/help.php script on the target server

MITRE ATT&CK