CVE-2010-2456
linker_img < 1.0 - Path Traversal via cook_lan Cookie Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-2456. PoCs published by Sn!pEr.S!Te Hacker.
AI-analyzed exploit summary This is a writeup describing a Remote File Inclusion (RFI) vulnerability in Linker IMG version 1.0. It provides URLs with vulnerable parameters but does not include executable exploit code.
Description
Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitrary local files via a URL in the (1) cook_lan cookie parameter ($lan_dir variable) or possibly (2) Sdb_type parameter. NOTE: this was originally reported as remote file inclusion, but this may be inaccurate.
Exploits (1)
This is a writeup describing a Remote File Inclusion (RFI) vulnerability in Linker IMG version 1.0. It provides URLs with vulnerable parameters but does not include executable exploit code.