CVEs-PoC/2010/CVE-2010-4998.md

CVE-2010-4998

Description

PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained from third party information.

POC

Reference

• http://packetstormsecurity.org/1006-exploits/ardeacore-rfi.txt
• http://securityreason.com/securityalert/8503
• http://www.exploit-db.com/exploits/13832/

Github

No PoCs found on GitHub currently.