CVE-2015-8358

bitrix.mpbuilder < 1.0.11 - Authenticated Path Traversal via Work Array Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-8358. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary This exploit demonstrates a PHP file inclusion vulnerability in bitrix.mpbuilder Bitrix module, allowing arbitrary file inclusion and execution via the 'work[]' POST parameter. It includes PoC forms for both direct file inclusion and session file-based command execution.

Description

Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the element name of the "work" array parameter to admin/bitrix.mpbuilder_step2.php.

Exploits (1)

exploitdb WORKING POC

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/38975

View Code ZIP pw:eip

This exploit demonstrates a PHP file inclusion vulnerability in bitrix.mpbuilder Bitrix module, allowing arbitrary file inclusion and execution via the 'work[]' POST parameter. It includes PoC forms for both direct file inclusion and session file-based command execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: bitrix.mpbuilder Bitrix module 1.0.10 and prior

No auth needed

Prerequisites: Access to the vulnerable endpoint · Ability to craft malicious POST requests

MITRE ATT&CK