Search...

PHP Doc System 1.5.1 - Local File Inclusion

2005-11-28T00:00:00

ID EDB-ID:26643
Type exploitdb
Reporter r0t
Modified 2005-11-28T00:00:00

Description

                                        
                                            source: https://www.securityfocus.com/bid/15611/info

PHP Doc System is prone to a local file-include vulnerability. This is due to the application's failure to properly sanitize user-supplied input.

This may facilitate the unauthorized viewing of files and unauthorized execution of local PHP code.

PHP Doc System 1.5.1 and prior versions are reported vulnerable; other versions may also be affected. 

http://www.example.com/index.php?show=../File

JSON Vulners Source

Initial Source

{"id": "EDB-ID:26643", "vendorId": null, "type": "exploitdb", "bulletinFamily": "exploit", "title": "PHP Doc System 1.5.1 - Local File Inclusion", "description": "", "published": "2005-11-28T00:00:00", "modified": "2005-11-28T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://www.exploit-db.com/exploits/26643", "reporter": "r0t", "references": [], "cvelist": ["2005-3878"], "immutableFields": [], "lastseen": "2022-01-13T06:20:23", "viewCount": 7, "enchantments": {"dependencies": {}, "score": {"value": -0.0, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.0}, "sourceHref": "https://www.exploit-db.com/download/26643", "sourceData": "source: https://www.securityfocus.com/bid/15611/info\r\n\r\nPHP Doc System is prone to a local file-include vulnerability. This is due to the application's failure to properly sanitize user-supplied input.\r\n\r\nThis may facilitate the unauthorized viewing of files and unauthorized execution of local PHP code.\r\n\r\nPHP Doc System 1.5.1 and prior versions are reported vulnerable; other versions may also be affected. \r\n\r\nhttp://www.example.com/index.php?show=../File ", "osvdbidlist": ["21140"], "exploitType": "webapps", "verified": true, "_state": {"dependencies": 1645311663}}