Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-4713. PoCs published by Stefan Schurtz.
AI-analyzed exploit summary The exploit demonstrates a Local File Inclusion (LFI) vulnerability in osCSS2 2.1.0 via the '_ID' parameter in 'shopping_cart.php' and 'content.php'. The vulnerability arises due to insufficient input validation in the 'pile_file_lang' function, allowing directory traversal attacks.
Description
Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the _ID parameter to (1) catalog/shopping_cart.php or (2) catalog/content.php.
Exploits (1)
The exploit demonstrates a Local File Inclusion (LFI) vulnerability in osCSS2 2.1.0 via the '_ID' parameter in 'shopping_cart.php' and 'content.php'. The vulnerability arises due to insufficient input validation in the 'pile_file_lang' function, allowing directory traversal attacks.