CVE-2004-2021
osCommerce 2.2 - Directory Traversal via File Manager Filename Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2021. PoCs published by Rene.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in osCommerce's file_manager.php, allowing attackers to access sensitive files outside the document root via '../' sequences. The provided URLs show how to retrieve /etc/passwd or list directories.
Description
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument.
Exploits (1)
The exploit demonstrates a directory traversal vulnerability in osCommerce's file_manager.php, allowing attackers to access sensitive files outside the document root via '../' sequences. The provided URLs show how to retrieve /etc/passwd or list directories.