CVE-2009-0444
GRBoard 1.8 - Remote Code Execution via Theme Path or GRBoard Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-0444. PoCs published by make0day.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in GRBoard 1.8, where the 'theme' and 'path' parameters in various PHP scripts can be manipulated to include remote files. The vulnerability arises due to improper input validation in the include statements.
Description
Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) theme parameter to (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/view.php, (c) 179_squarebox_gallery_list_pds/view.php, (d) 179_squarebox_gallery_list/view.php, (e) 179_squarebox_gallery/view.php, (f) 179_squarebox_board_swfupload/view.php, (g) 179_squarebox_board_expand/view.php, (h) 179_squarebox_board_basic_with_grcode/view.php, (i) 179_squarebox_board_basic/view.php, (j) 179_simplebar_pds_list/view.php, (k) 179_simplebar_notice/view.php, (l) 179_simplebar_gallery_list_pds/view.php, (m) 179_simplebar_gallery/view.php, and (n) 179_simplebar_basic/view.php in theme/; the (2) path parameter to (o) latest/sirini_gallery_latest/list.php; and the (3) grboard parameter to (p) include.php and (q) form_mail.php.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in GRBoard 1.8, where the 'theme' and 'path' parameters in various PHP scripts can be manipulated to include remote files. The vulnerability arises due to improper input validation in the include statements.