CVE-2008-6206
RobotStats 0.1 - Remote Code Execution via DOCUMENT_ROOT Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-6206. PoCs published by ZoRLu.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in RobotStats 0.1 by manipulating the DOCUMENT_ROOT parameter to include arbitrary files. The PoC shows how an attacker can include a remote file (ZoRLu.txt) via the vulnerable parameter.
Description
Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to (1) graph.php and (2) robotstats.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (2)
This exploit demonstrates a remote file inclusion vulnerability in RobotStats 0.1 by manipulating the DOCUMENT_ROOT parameter to include arbitrary files. The PoC shows how an attacker can include a remote file (ZoRLu.txt) via the vulnerable parameter.
The provided text describes a remote file-include vulnerability in RobotStats 0.1, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.