CVE-2005-3507
CuteNews < 1.4.1 - Directory Traversal and Remote Code Execution via Template Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-3507. PoCs published by [email protected].
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in CuteNews 1.4.1, allowing attackers to retrieve or upload arbitrary files via '../' sequences in the 'template' parameter. No actual exploit code is present, only a description and example URIs.
Description
Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges via "../" sequences in the template parameter to (1) show_archives.php and (2) show_news.php.
Exploits (2)
The provided text describes a directory traversal vulnerability in CuteNews 1.4.1, allowing attackers to retrieve or upload arbitrary files via '../' sequences in the 'template' parameter. No actual exploit code is present, only a description and example URIs.
CVE-2005-3507 describes a directory traversal vulnerability in CuteNews 1.4.1, allowing attackers to read arbitrary files or upload malicious scripts via the 'template' parameter in show_archives.php. The provided examples demonstrate path traversal sequences to access sensitive files or execute arbitrary scripts.