Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0879. PoCs published by Richard Brain.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in Gafware's CFXImage documentation program, allowing attackers to read arbitrary files by manipulating the FILE parameter in showtemp.cfm. No actual exploit code is provided, only examples of malicious URLs.
Description
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.
Exploits (1)
The exploit describes a directory traversal vulnerability in Gafware's CFXImage documentation program, allowing attackers to read arbitrary files by manipulating the FILE parameter in showtemp.cfm. No actual exploit code is provided, only examples of malicious URLs.