Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2008-2863

Description

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/.

POC

Reference

- http://securityreason.com/securityalert/3957

- http://www.bugreport.ir/?/45

- https://www.exploit-db.com/exploits/5859

Github

No PoCs found on GitHub currently.