Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-6112. PoCs published by b3hz4d.
AI-analyzed exploit summary The exploit describes Local File Inclusion (LFI) and Remote File Disclosure vulnerabilities in Ez Ringtone Manager. It provides URLs to exploit the vulnerabilities by manipulating the 'id' parameter in main.php and template.php.
Description
Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in a detail action to (1) main.php and (2) template.php in ringtones/.
Exploits (1)
The exploit describes Local File Inclusion (LFI) and Remote File Disclosure vulnerabilities in Ez Ringtone Manager. It provides URLs to exploit the vulnerabilities by manipulating the 'id' parameter in main.php and template.php.