Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2223. PoCs published by JosS.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in LightOpenCMS 0.1 due to improper handling of the 'cwd' parameter in smarty.php. By manipulating the parameter, an attacker can include arbitrary files, such as boot.ini, leading to potential information disclosure or further exploitation.
Description
Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cwd parameter. NOTE: remote file inclusion attacks may be possible.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in LightOpenCMS 0.1 due to improper handling of the 'cwd' parameter in smarty.php. By manipulating the parameter, an attacker can include arbitrary files, such as boot.ini, leading to potential information disclosure or further exploitation.