Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5792. PoCs published by BugReport.IR.
AI-analyzed exploit summary This is a writeup describing a file inclusion vulnerability in Enthusiast 3.1.4, where the 'path' parameter in show_joined.php can be manipulated to include arbitrary files when register_globals is enabled. The advisory includes proof-of-concept URLs but no executable exploit code.
Description
PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: the researcher also points out the analogous directory traversal issue.
Exploits (1)
This is a writeup describing a file inclusion vulnerability in Enthusiast 3.1.4, where the 'path' parameter in show_joined.php can be manipulated to include arbitrary files when register_globals is enabled. The advisory includes proof-of-concept URLs but no executable exploit code.