Description
Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability. NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which does not appear to use a "page" parameter or variable.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Core News 2.0.1 - 'index.php' Remote Code Execution EDB-27413 · webapps · Mar 10, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://web.archive.org/web/20050323212004/www.coreslawn.de/?show=downloads&cat_id=1
- 754 third-party-advisory
- corenews-index-command-execution(25180) vdb-entry
- 20060309 CoreNews 2.0.1 Remote Command Exucetion mailing-list
- 17067 vdb-entry
- 24080 vdb-entry
- 20060313 Oddness - CoreNews 2.0.1 Remote Command Exucetion mailing-list