CVE-2002-2084
Portix-PHP 0.4.02 - Directory Traversal via l or topic Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-2084. PoCs published by frog.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in Portix-PHP's view.php script, allowing attackers to read arbitrary files by injecting '../' sequences. The provided URL demonstrates accessing '/etc/passwd' via the 'topic' parameter.
Description
Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) l and (2) topic parameters.
Exploits (2)
The exploit describes a directory traversal vulnerability in Portix-PHP's view.php script, allowing attackers to read arbitrary files by injecting '../' sequences. The provided URL demonstrates accessing '/etc/passwd' via the 'topic' parameter.
The exploit describes a directory traversal vulnerability in Portix-PHP's index.php script, allowing attackers to read arbitrary files by injecting '../' sequences. No actual exploit code is provided, only a description and example URL.