CVE-2008-6196
Philippe CROCHAT EasySite 2.0 - Remote Code Execution via EASYSITE_BASE Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-6196. PoCs published by ZoRLu.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in EasySite 2.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but does not include executable exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITE_BASE parameter to (1) browser.php, (2) image_editor.php and (3) skin_chooser.php in configuration/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (3)
The provided text describes a remote file inclusion vulnerability in EasySite 2.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but does not include executable exploit code.
The provided text describes a remote file inclusion vulnerability in EasySite 2.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but does not include executable exploit code.
This exploit demonstrates a remote file inclusion vulnerability in EasySite 2.0 by manipulating the 'EASYSITE_BASE' parameter in 'browser.php' to include arbitrary files. The vulnerability arises due to insufficient sanitization of user-supplied input.