CVE-2004-2047
EasyWeb FileManager 1.0 RC-1 - Directory Traversal via pathext Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2047. PoCs published by [email protected].
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1, where insufficient sanitization of user-supplied data allows traversal sequences to access files outside intended directories. The exploit requires valid account credentials and may be limited by administrator configurations.
Description
Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. (dot dot) in the pathext parameter.
Exploits (1)
The provided text describes a directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1, where insufficient sanitization of user-supplied data allows traversal sequences to access files outside intended directories. The exploit requires valid account credentials and may be limited by administrator configurations.