PHP Remote File Inclusion Vulnerability in J-OWAMP Web Interface
CVE-2006-6453

Currently unrated

Key Information:

Vendor: J-owamp
Status: Web Interface
Vendor: CVE Published:; 10 December 2006

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2006-6453?

The J-OWAMP Web Interface 2.1 is impacted by a PHP remote file inclusion vulnerability within the JOWAMP_ShowPage.php script. This weakness permits authenticated users to manipulate the 'link' parameter, allowing them to execute arbitrary PHP code on the server. Successful exploitation can lead to severe security breaches, enabling unauthorized actions that compromise the integrity of the web application and potentially the underlying system.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2006-6453 - Proof of Concept