Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-7152. PoCs published by ZoRLu, Kw3[R]Ln.
AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in SID (Specimen Image Database) due to insufficient input sanitization. It references a URL path that could be exploited to include arbitrary files, potentially leading to remote code execution.
Description
Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php.
Exploits (2)
The provided text describes a remote file inclusion vulnerability in SID (Specimen Image Database) due to insufficient input sanitization. It references a URL path that could be exploited to include arbitrary files, potentially leading to remote code execution.
The exploit describes a remote file inclusion vulnerability in SID software due to an unsanitized $dir variable when register_globals is enabled. It lacks actual exploit code but provides a proof-of-concept URL for exploitation.