CVEs-PoC/2006/CVE-2006-4373.md

CVE-2006-4373

Description

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.

POC

Reference

• http://securityreason.com/securityalert/1449
• http://securityreason.com/securityalert/1449
• https://www.exploit-db.com/exploits/2249
• https://www.exploit-db.com/exploits/2249

Github

No PoCs found on GitHub currently.