CVE-2008-4499
PHP Web Explorer Lite < 0.99b - Path Traversal via Refer or File Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-4499. PoCs published by Pepelux.
AI-analyzed exploit summary The provided text describes a local file inclusion (LFI) vulnerability in PHP Web Explorer 0.99b, where improper input sanitization allows directory traversal attacks. No actual exploit code is present, only a description and example URL.
Description
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) refer parameter to main.php and the (2) file parameter to edit.php.
Exploits (2)
The provided text describes a local file inclusion (LFI) vulnerability in PHP Web Explorer 0.99b, where improper input sanitization allows directory traversal attacks. No actual exploit code is present, only a description and example URL.
The provided text describes a local file inclusion (LFI) vulnerability in PHP Web Explorer 0.99b, where an attacker can exploit improper input sanitization to traverse directories and access sensitive files like /etc/passwd. No actual exploit code is present, only a description and example URL.