CVE-2009-1960
DokuWiki 2009-02-14, rc2009-02-06, rc2009-01-30 - Remote Code Execution via config_cascade Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1960. PoCs published by Nine:Situations:Group, girex.
AI-analyzed exploit summary This exploit demonstrates remote and temporary file inclusion vulnerabilities in DokuWiki 2009-02-14. It leverages PHP's FTP wrapper and file upload mechanisms to achieve remote code execution (RCE) by manipulating the `config_cascade` parameter.
Description
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.
Exploits (2)
This exploit demonstrates remote and temporary file inclusion vulnerabilities in DokuWiki 2009-02-14. It leverages PHP's FTP wrapper and file upload mechanisms to achieve remote code execution (RCE) by manipulating the `config_cascade` parameter.
This exploit leverages a Local File Inclusion (LFI) vulnerability in DokuWiki due to improper handling of the $config_cascade variable when register_globals is enabled. It allows arbitrary file inclusion and potential Remote Command Execution (RCE) if the attacker can control the content of an included file.