Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0572. PoCs published by Alfons Luja.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Flatnux due to improper sanitization of the `_FNROOTPATH` parameter. The PoC shows how an attacker can inject a malicious path to execute arbitrary code.
Description
PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globals is enabled and magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the _FNROOTPATH parameter to (1) index.php and (2) filemanager.php.
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Flatnux due to improper sanitization of the `_FNROOTPATH` parameter. The PoC shows how an attacker can inject a malicious path to execute arbitrary code.