EDB-25104

functional

CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion

view exploit source exploit_dbverifiedtype webappsauthor RedTeam Pentestingpublished 2005-02-15catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2005-0411UShigh7.5Exploit
Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users to include arbitrary PHP files via .. (dot dot) sequences in t…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan