CVE-2008-6066
Meet#Web 0.8 - Remote Code Execution via root_path Parameter
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2008-6066. PoCs published by Rakesh S.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Meet#Web 0.8, where insufficient sanitization of user-supplied data allows arbitrary file inclusion via the 'root_path' parameter. No actual exploit code is present, only a description and example URL.
Description
Multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) modules.php, (2) ManagerResource.class.php, (3) ManagerRightsResource.class.php, (4) RegForm.class.php, (5) RegResource.class.php, and (6) RegRightsResource.class.php in classes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (6)
The provided text describes a remote file inclusion vulnerability in Meet#Web 0.8, where insufficient sanitization of user-supplied data allows arbitrary file inclusion via the 'root_path' parameter. No actual exploit code is present, only a description and example URL.
The provided text describes a remote file inclusion vulnerability in Meet#Web 0.8, where insufficient sanitization of user-supplied data allows arbitrary file inclusion via the 'root_path' parameter in RegResource.class.php. No actual exploit code is present, only a description and example URL.
The provided text describes a remote file inclusion vulnerability in Meet#Web 0.8, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files via the 'root_path' parameter in RegForm.class.php. No actual exploit code is present, only a description and example URL.
The provided text describes a remote file inclusion vulnerability in Meet#Web 0.8, where insufficient sanitization of user-supplied data allows arbitrary file inclusion via the 'root_path' parameter. No actual exploit code is present, only a description and example URL.
The provided text describes a remote file inclusion vulnerability in Meet#Web 0.8, where insufficient sanitization of user-supplied data allows arbitrary file inclusion via the 'root_path' parameter. No actual exploit code is present, only a description and example URL.
The provided text describes a remote file inclusion vulnerability in Meet#Web 0.8, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but lacks executable exploit code.