PHP Remote File Inclusion Vulnerability in SezHoo Product by SezHoo
CVE-2008-4704
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-4704?
The SezHoo product version 0.1 contains a vulnerability in the SezHooTabsAndActions.php file, allowing remote attackers to exploit a PHP remote file inclusion flaw. This vulnerability enables malicious users to execute arbitrary PHP code by manipulating the IP parameter in a URL. As a result, unauthorized access and manipulation of the affected system can occur, posing significant security risks to users and their data.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.