CVE-2008-6658
Simple Machines Forum 1.0-1.0.14 and 1.1-1.1.6 - Authenticated Path Traversal via Package Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6658. PoCs published by Charles Fol.
AI-analyzed exploit summary This exploit leverages a combination of vulnerabilities in SMF 1.1.6, including CSRF and improper file handling, to achieve remote code execution by tricking an admin into installing a malicious package via an image tag in a forum post.
Description
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action, as demonstrated by a predictable package filename in attachments/ that was uploaded through a post2 action to index.php.
Exploits (1)
This exploit leverages a combination of vulnerabilities in SMF 1.1.6, including CSRF and improper file handling, to achieve remote code execution by tricking an admin into installing a malicious package via an image tag in a forum post.