CVE-2008-4662

LokiCMS 0.3.4 - Unauthenticated Path Traversal via Language Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4662. PoCs published by JosS.

AI-analyzed exploit summary This exploit targets a Local File Inclusion (LFI) vulnerability in LokiCMS 0.3.4 by manipulating the 'language' parameter in admin.php to include arbitrary files. It demonstrates reading /etc/passwd by leveraging path traversal and null byte injection.

Description

Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by JosS · textwebappsphp

https://www.exploit-db.com/exploits/6744

View Code ZIP pw:eip

This exploit targets a Local File Inclusion (LFI) vulnerability in LokiCMS 0.3.4 by manipulating the 'language' parameter in admin.php to include arbitrary files. It demonstrates reading /etc/passwd by leveraging path traversal and null byte injection.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: LokiCMS 0.3.4

Auth required

Prerequisites: magic_quotes_gpc = Off · admin access to admin.php

MITRE ATT&CK