CVE-2008-6659
Simple Machines Forum 1.0-1.0.14 and 1.1-1.1.6 - Authenticated Path Traversal via Theme Directory Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-6659. PoCs published by ~elmysterio.
AI-analyzed exploit summary This exploit targets a local file inclusion vulnerability in Simple Machines Forum (SMF) <= 1.1.6 when magic_quotes is disabled. It uploads a malicious GIF file containing PHP shellcode to achieve remote code execution.
Description
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during a jsoption action, related to Sources/QueryString.php and Sources/Themes.php, as demonstrated by a local .gif file in attachments/ with PHP code that was uploaded through a profile2 action to index.php.
Exploits (1)
This exploit targets a local file inclusion vulnerability in Simple Machines Forum (SMF) <= 1.1.6 when magic_quotes is disabled. It uploads a malicious GIF file containing PHP shellcode to achieve remote code execution.