Vulnerabilities > CVE-2006-5510 - Local File Include vulnerability in PH Pexplorer Language
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | PH Pexplorer <= 0.24 (explorer_load_lang.php) Local Include Exploit. CVE-2006-5510. Webapps exploit for php platform |
| file | exploits/php/webapps/2598.php |
| id | EDB-ID:2598 |
| last seen | 2016-01-31 |
| modified | 2006-10-19 |
| platform | php |
| port | |
| published | 2006-10-19 |
| reporter | Kacper |
| source | https://www.exploit-db.com/download/2598/ |
| title | PH Pexplorer <= 0.24 explorer_load_lang.php Local Include Exploit |
| type | webapps |
References
- http://secunia.com/advisories/22504
- http://www.osvdb.org/29899
- http://www.rahim.webd.pl/exploity/Exploits/104.txt
- http://www.securityfocus.com/bid/20665
- http://www.vupen.com/english/advisories/2006/4128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29714
- https://www.exploit-db.com/exploits/2598