CVE-2010-1058

Phpkobo Address Book Script <1.09 - Path Traversal

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1058. PoCs published by Pouya Daneshmand.

AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Address Book Script 1.9 by manipulating the LANG_CODE parameter to read arbitrary files (e.g., /etc/passwd). The null byte (%00) is used to terminate the path and bypass file extension checks.

Description

Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG_CODE parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Pouya Daneshmand · textwebappsphp

https://www.exploit-db.com/exploits/11754

View Code ZIP pw:eip

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Address Book Script 1.9 by manipulating the LANG_CODE parameter to read arbitrary files (e.g., /etc/passwd). The null byte (%00) is used to terminate the path and bypass file extension checks.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Address Book Script 1.9

No auth needed

Prerequisites: Target application must be running Address Book Script 1.9 · PHP must be configured to allow null byte termination in file paths

MITRE ATT&CK