Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5604. PoCs published by cOndemned.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in My Simple Forum 3.0. The vulnerability arises from improper input validation in the 'action' parameter, allowing an attacker to include arbitrary local files via directory traversal sequences.
Description
Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action parameter.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in My Simple Forum 3.0. The vulnerability arises from improper input validation in the 'action' parameter, allowing an attacker to include arbitrary local files via directory traversal sequences.