CVE-2003-0762

Foxweb <2.5 - Remote Code Execution

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0762. PoCs published by pokleyzz.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in FoxWeb 2.5 via maliciously crafted PATH_INFO data. It sends a reverse shell payload to execute arbitrary code on the target system.

Description

Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value).

Exploits (1)

exploitdb WORKING POC VERIFIED

by pokleyzz · perldoswindows

https://www.exploit-db.com/exploits/23102

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in FoxWeb 2.5 via maliciously crafted PATH_INFO data. It sends a reverse shell payload to execute arbitrary code on the target system.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: FoxWeb 2.5

No auth needed

Prerequisites: Network access to the target · FoxWeb 2.5 running on the target

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Exploit, Vendor Advisory mailing-list x_refsource_vulnwatch

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0096.html

Scores

EPSS 0.0780

EPSS Percentile 93.9%

Details

Status published

Products (1)

foxweb/foxweb 2.5

Published Sep 17, 2003

Tracked Since Feb 18, 2026