CVE-2008-6543
ComScripts Quick Classifieds 1.0 - Remote File Inclusion via DOCUMENT_ROOT Parameter
Title source: llmExploitation Summary
EIP tracks 36 public exploits for CVE-2008-6543. PoCs published by ZoRLu.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
Description
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parameter to (1) index.php3, (2) locate.php3, (3) search_results.php3, (4) classifieds/index.php3, and (5) classifieds/view.php3; (6) index.php3, (7) manager.php3, (8) pass.php3, (9) remember.php3 (10) sign-up.php3, (11) update.php3, (12) userSet.php3, and (13) verify.php3 in controlcenter/; (14) alterCats.php3, (15) alterFeatured.php3, (16) alterHomepage.php3, (17) alterNews.php3, (18) alterTheme.php3, (19) color_help.php3, (20) createdb.php3, (21) createFeatured.php3, (22) createHomepage.php3, (23) createL.php3, (24) createM.php3, (25) createNews.php3, (26) createP.php3, (27) createS.php3, (28) createT.php3, (29) index.php3, (30) mailadmin.php3, and (31) setUp.php3 in controlpannel/; (32) include/sendit.php3 and (33) include/sendit2.php3; and possibly (34) include/adminHead.inc, (35) include/usersHead.inc, and (36) style/default.scheme.inc.
Exploits (36)
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data in the 'DOCUMENT_ROOT' parameter allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but does not include executable exploit code.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter in sendit2.php3. An attacker can include arbitrary remote files, potentially leading to remote code execution.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0 due to insufficient sanitization of user-supplied data. The example URL demonstrates how an attacker could exploit this by manipulating the DOCUMENT_ROOT parameter.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates how an attacker could exploit this by manipulating the DOCUMENT_ROOT parameter.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the exploitation vector but lacks executable code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates how an attacker could exploit this by manipulating the DOCUMENT_ROOT parameter.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter to include an arbitrary file (ZoRLu.txt). The vulnerability arises from insufficient sanitization of user-supplied input.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter to include an arbitrary file (ZoRLu.txt). The vulnerability arises from insufficient sanitization of user-supplied input.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter to include an arbitrary file (ZoRLu.txt). The vulnerability arises from insufficient sanitization of user-supplied input.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the exploitation vector but lacks executable code.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter in createHomepage.php3. The lack of input sanitization allows an attacker to include arbitrary remote files, potentially leading to remote code execution.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but does not include executable exploit code.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter in createdb.php3. An attacker can include arbitrary remote files, potentially leading to remote code execution.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 due to insufficient sanitization of the DOCUMENT_ROOT parameter in color_help.php3. An attacker can include arbitrary remote files, potentially leading to remote code execution.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates how an attacker could exploit this by manipulating the DOCUMENT_ROOT parameter.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter in alterHomepage.php3. The vulnerability allows an attacker to include arbitrary remote files, potentially leading to remote code execution.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates how an attacker could exploit this by injecting a malicious file path via the DOCUMENT_ROOT parameter.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion via the DOCUMENT_ROOT parameter. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates how an attacker could exploit this by injecting a malicious file path via the DOCUMENT_ROOT parameter.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter in update.php3. An attacker can include arbitrary remote files, potentially leading to remote code execution.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates how an attacker could exploit this by injecting a malicious path via the DOCUMENT_ROOT parameter.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but does not include executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 due to insufficient sanitization of the DOCUMENT_ROOT parameter. An attacker can include arbitrary remote files, potentially leading to remote code execution.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows an attacker to include arbitrary files. The example URL demonstrates the vulnerability but lacks executable exploit code.
This exploit demonstrates a remote file inclusion vulnerability in Quick Classifieds 1.0 by manipulating the DOCUMENT_ROOT parameter to include an arbitrary file (ZoRLu.txt). The vulnerability arises from insufficient sanitization of user-supplied input.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file inclusion vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.
The provided text describes a remote file-include vulnerability in Quick Classifieds 1.0, where insufficient sanitization of user-supplied data allows arbitrary file inclusion. The example URL demonstrates the vulnerability but lacks executable exploit code.