CVE-2010-1106

AdvertisementManager 3.1.0 - Remote Code Execution via req Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1106. PoCs published by indoushka.

AI-analyzed exploit summary This exploit demonstrates a local and remote file inclusion vulnerability in AdvertisementManager 3.1.0 due to insufficient input sanitization. The PoC shows how an attacker can include arbitrary files (e.g., boot.ini) or remote files (e.g., c.txt) via the 'req' parameter.

Description

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

Exploits (1)

exploitdb WORKING POC VERIFIED
by indoushka · textwebappsphp
https://www.exploit-db.com/exploits/34849

This exploit demonstrates a local and remote file inclusion vulnerability in AdvertisementManager 3.1.0 due to insufficient input sanitization. The PoC shows how an attacker can include arbitrary files (e.g., boot.ini) or remote files (e.g., c.txt) via the 'req' parameter.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: AdvertisementManager 3.1.0
Auth required
Prerequisites: Valid credentials (usr, passw) · Access to the vulnerable endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/55756

Scores

EPSS 0.0210
EPSS Percentile 79.3%

Details

CWE
CWE-94
Status published
Products (1)
advertisementmanager/advertisementmanager 3.1.0
Published Mar 25, 2010
Tracked Since Feb 18, 2026