CVE-2008-6668
EXPLOITED NUCLEInweb2fax <= 0.2.7 - Path Traversal via id or var_filename Parameter
Title source: llmExploitation Summary
CVE-2008-6668 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including dun. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in nweb2fax <= 0.2.7, including Local File Inclusion (LFI), Arbitrary File Download, and Remote Command Execution (RCE) via improper input validation in PHP scripts. The RCE is achieved through command injection in the `viewrq.php` script when handling the `format` and `var_filename` parameters.
Description
Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) id parameter to comm.php and (2) var_filename parameter to viewrq.php.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in nweb2fax <= 0.2.7, including Local File Inclusion (LFI), Arbitrary File Download, and Remote Command Execution (RCE) via improper input validation in PHP scripts. The RCE is achieved through command injection in the `viewrq.php` script when handling the `format` and `var_filename` parameters.