Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4089. PoCs published by Abysssec, corelanc0d3r.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in Telepark Wiki <= v2.4.23, including remote command execution via file upload, local file inclusion leading to admin password disclosure, cross-site scripting, and unauthorized page/comment deletion. It provides technical analysis, vulnerable code snippets, and patch details.
Description
telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or (2) delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php.
Exploits (2)
This advisory details multiple vulnerabilities in Telepark Wiki <= v2.4.23, including remote command execution via file upload, local file inclusion leading to admin password disclosure, cross-site scripting, and unauthorized page/comment deletion. It provides technical analysis, vulnerable code snippets, and patch details.
This exploit targets a buffer overflow vulnerability in ProShow Gold 4.0 via a maliciously crafted .psh file. It leverages SEH overwrites and includes a Metasploit-generated shellcode payload to execute arbitrary code (e.g., calc.exe).