CVE-2012-5293

SAPID CMS 1.2.3 - Remote Code Execution via GLOBALS[root_path] or root_path Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-5293. PoCs published by Opa Yong.

AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in SAPID CMS 1.2.3 Stable. It allows an attacker to include arbitrary remote files via manipulated `root_path` or `GLOBALS[root_path]` parameters in specific PHP scripts.

Description

Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[root_path] parameter to usr/extensions/get_tree.inc.php or (2) root_path parameter to usr/extensions/get_infochannel.inc.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Opa Yong · textwebappsphp

https://www.exploit-db.com/exploits/18342

View Code ZIP pw:eip

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in SAPID CMS 1.2.3 Stable. It allows an attacker to include arbitrary remote files via manipulated `root_path` or `GLOBALS[root_path]` parameters in specific PHP scripts.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: SAPID CMS 1.2.3 Stable

No auth needed

Prerequisites: Network access to the target SAPID CMS instance · Ability to host a malicious file on a remote server

MITRE ATT&CK