Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4088. PoCs published by corelanc0d3r.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in ProShow Gold 4.0 via a maliciously crafted .psh file. It leverages SEH overwrites and includes a Metasploit-generated shellcode payload to execute arbitrary code (e.g., calc.exe).
Description
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to (1) getjs.php and (2) getcsslocal.php; and include and execute arbitrary local files via the (3) group parameter to upload.php.
Exploits (2)
This exploit targets a buffer overflow vulnerability in ProShow Gold 4.0 via a maliciously crafted .psh file. It leverages SEH overwrites and includes a Metasploit-generated shellcode payload to execute arbitrary code (e.g., calc.exe).
This advisory details multiple vulnerabilities in Telepark Wiki <= v2.4.23, including remote command execution via file upload, local file inclusion leading to admin password disclosure, cross-site scripting, and unauthorized page/comment deletion. It provides code snippets, proof-of-concept URLs, and patch details.