.. / CVE-2008-6668

• LFI
• Nuclei
• Web

Exploit for nweb2fax <=0.2.7 - Local File Inclusion (CVE-2008-6668)

Description:

nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via the id parameter submitted to comm.php and the var_filename parameter submitted to viewrq.php.

Nuclei Template

View the template here CVE-2008-6668.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2008/CVE-2008-6668.yaml

References: