CVE-2004-0302
fools_workshop owls_workshop - Directory Traversal via File Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-0302. PoCs published by G00db0y.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'editfile' parameter in the URI.
Description
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile in newmultiplechoice.php.
Exploits (3)
This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'editfile' parameter in the URI.
This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'file' parameter in the URI. The provided example retrieves the '/etc/passwd' file, confirming the vulnerability.
This exploit demonstrates a directory traversal vulnerability in Owl's Workshop, allowing an attacker to read arbitrary files on the system by manipulating the 'editfile' parameter in the URI. The provided example shows accessing '/etc/passwd' via multiple '../' sequences.