Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2398. PoCs published by ahmadbady.
AI-analyzed exploit summary This exploit demonstrates a local file inclusion (LFI) vulnerability in PHP-Sugar 0.80. The vulnerability allows an attacker to include arbitrary files by manipulating the 't' parameter in the URL, leading to potential information disclosure or remote code execution if combined with log poisoning or other techniques.
Description
Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// (dot dot slash slash) in the t parameter.
Exploits (1)
This exploit demonstrates a local file inclusion (LFI) vulnerability in PHP-Sugar 0.80. The vulnerability allows an attacker to include arbitrary files by manipulating the 't' parameter in the URL, leading to potential information disclosure or remote code execution if combined with log poisoning or other techniques.