CVE-2009-1246
Blogplus 1.0 - Path Traversal and Arbitrary File Execution via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1246. PoCs published by ahmadbady.
AI-analyzed exploit summary This exploit demonstrates a local file inclusion (LFI) vulnerability in blog+ v1.0, allowing an attacker to read arbitrary files by manipulating the 'file' parameter in multiple PHP scripts. The vulnerability arises from unsanitized user input being passed directly to include() statements.
Description
Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_down[file] parameter to includes/block_center_down.php; (2) row_mysql_blocks_center_top[file] includes/parameter to block_center_top.php; (3) row_mysql_blocks_left[file] parameter to includes/block_left.php; (4) row_mysql_blocks_right[file] parameter to includes/block_right.php; and row_mysql_bloginfo[theme] parameter to (5) includes/window_down.php and (6) includes/window_top.php.
Exploits (1)
This exploit demonstrates a local file inclusion (LFI) vulnerability in blog+ v1.0, allowing an attacker to read arbitrary files by manipulating the 'file' parameter in multiple PHP scripts. The vulnerability arises from unsanitized user input being passed directly to include() statements.