7.5
CVSSv2

CVE-2006-1662

Published: 07/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote malicious users to execute arbitrary PHP commands via the Itemid parameter in index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

limbo cms limbo cms 1.0.4.1

limbo cms limbo cms 1.0.4.2

Exploits

## # Title: Limbo CMS version 1x suffers from a remote code execution vulnerability # Name: limbo_cms_1_xpm # License: Artistic/BSD/GPL # Info: Trying to get the command execution exploits out of the way on milw0rmcom M's are always good # # # - This is an exploit module for the Metasploit Framework, please see # ...
#!/usr/bin/perl ## ## Limbo CMS <= 1042 (ItemID) Remote Code Execution Exploit ## Bug Discovered by: Coloss / Epsilon (advance1[at]gmailcom) codedaltervistaorg/limbophppl ## /str0ke (milw0rmcom) use LWP::Simple; $serv = $ARGV[0]; $path = $ARGV[1]; $command = $ARGV[2]; $cmd = "echo start_er;" "$com ...