Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-0405. PoCs published by dun.
AI-analyzed exploit summary This Perl script exploits a Local File Inclusion (LFI) vulnerability in PhpGedView <= 4.2.3 by traversing directories to read arbitrary files (e.g., /etc/passwd). It checks for installed modules and attempts to include the target file via the 'module.php' script.
Description
Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the pgvaction parameter.
Exploits (1)
This Perl script exploits a Local File Inclusion (LFI) vulnerability in PhpGedView <= 4.2.3 by traversing directories to read arbitrary files (e.g., /etc/passwd). It checks for installed modules and attempts to include the target file via the 'module.php' script.