Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-0465. PoCs published by karak0rsan.
AI-analyzed exploit summary This exploit targets WebConnect versions 6.4.4 to 6.5 by sending multiple HTTP requests to access sensitive files (e.g., boot.ini) via directory traversal. It also attempts to trigger a DoS by flooding the server with requests to COM ports.
Description
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.
Exploits (1)
This exploit targets WebConnect versions 6.4.4 to 6.5 by sending multiple HTTP requests to access sensitive files (e.g., boot.ini) via directory traversal. It also attempts to trigger a DoS by flooding the server with requests to COM ports.