Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-7076. PoCs published by ZoRLu.
AI-analyzed exploit summary This exploit demonstrates a remote file upload vulnerability in Star Articles 6.0, allowing an attacker to upload a malicious PHP shell via the profile photo upload feature. The PoC includes steps to register, upload a shell, and access it to execute arbitrary commands.
Description
Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile photo, then accessing it via a direct request to the file in authorphoto/.
Exploits (1)
This exploit demonstrates a remote file upload vulnerability in Star Articles 6.0, allowing an attacker to upload a malicious PHP shell via the profile photo upload feature. The PoC includes steps to register, upload a shell, and access it to execute arbitrary commands.