15232exploit
http://www.exploit-db.com/exploits/15232 CVE-2010-4798
OrangeHRM 2.6.0.1 - Local File Inclusion
Record summary
CVE-2010-4798 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOrangeHRM 2.6.0.1 - Local File InclusionExploitDB exploitby ZonTaNot analyzed1 file
References
443905vdb entry
http://www.securityfocus.com/bid/43905 orangehrm-index-file-include(62388)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/62388 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-4798