Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-6389. PoCs published by Portcullis.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in PHPCompta/NOALYSS 6.7.1 via the 'd' parameter in backup.php, allowing arbitrary command execution through passthru(). The PoC demonstrates writing a PHP file with phpinfo() to the application root.
Description
backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the d parameter.
Exploits (1)
This exploit leverages a command injection vulnerability in PHPCompta/NOALYSS 6.7.1 via the 'd' parameter in backup.php, allowing arbitrary command execution through passthru(). The PoC demonstrates writing a PHP file with phpinfo() to the application root.