CVE-2004-0327
PhpNewsManager 1.46 - Directory Traversal via clang Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2004-0327. PoCs published by G00db0y, anonymous, Dave Wilson.
AI-analyzed exploit summary The provided code is a writeup describing a directory traversal vulnerability in phpNewsManager, allowing remote attackers to access sensitive files outside the web root via a crafted request to functions.php.
Description
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter.
Exploits (4)
The provided code is a writeup describing a directory traversal vulnerability in phpNewsManager, allowing remote attackers to access sensitive files outside the web root via a crafted request to functions.php.
This exploit bypasses PHP's 'safe_mode' restrictions by leveraging the MySQL client library's failure to honor these restrictions. It uses a LOAD DATA statement to read files from restricted areas of the filesystem, such as '/etc/passwd'.
This exploit demonstrates a bypass of PHP's 'safe_mode' restrictions by leveraging the MySQL client library's failure to honor these restrictions. It uses a LOAD DATA LOCAL INFILE statement to read files from restricted areas of the filesystem, such as '/etc/passwd'.
This exploit bypasses PHP's safe_mode restrictions by leveraging the MySQL client library's failure to honor safe_mode. It uses a LOAD DATA statement to read arbitrary files from the filesystem and outputs their contents.