CVE-2005-0409
CitrusDB < 0.3.6 - Unauthenticated Sensitive Information Exposure via Import/Upload Endpoints
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0409. PoCs published by RedTeam Pentesting.
AI-analyzed exploit summary This exploit leverages an access validation vulnerability in CitrusDB during CSV file uploads, allowing unauthenticated file upload and potential SQL injection or path disclosure. The provided curl command demonstrates the issue by bypassing credential verification.
Description
CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows remote attackers to upload credit card data and obtain sensitive information such as the pathnames for temporary files that store credit card data, and facilitates the exploitation of other vulnerabilities.
Exploits (2)
This exploit leverages an access validation vulnerability in CitrusDB during CSV file uploads, allowing unauthenticated file upload and potential SQL injection or path disclosure. The provided curl command demonstrates the issue by bypassing credential verification.
This exploit leverages an authentication bypass vulnerability in CitrusDB to upload CSV files without proper credential verification, potentially leading to path disclosure or SQL injection. The provided curl command demonstrates the issue by bypassing authentication via a crafted cookie.