Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4543. PoCs published by Moudi.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in Facil Helpdesk, including XSS, LFI, and RFI. The PoC provides specific URLs to exploit these vulnerabilities, particularly targeting the 'lng' parameter in index.php and the path in kbase.php.
Description
PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in Facil Helpdesk, including XSS, LFI, and RFI. The PoC provides specific URLs to exploit these vulnerabilities, particularly targeting the 'lng' parameter in index.php and the path in kbase.php.