CVE-2005-3330
Snoopy 1.2 - Remote Code Execution via HTTPS URL Shell Metacharacters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3330. PoCs published by D. Fabian.
AI-analyzed exploit summary The exploit demonstrates a command injection vulnerability in Snoopy by crafting a malicious URI that writes arbitrary content to a file. The PoC shows how unsanitized input can lead to remote command execution in the context of the webserver.
Description
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
Exploits (1)
The exploit demonstrates a command injection vulnerability in Snoopy by crafting a malicious URI that writes arbitrary content to a file. The PoC shows how unsanitized input can lead to remote command execution in the context of the webserver.