CVE-2005-4202
LogiSphere 0.9.9j - Directory Traversal via URL and Parameter Manipulation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-4202. PoCs published by dr_insane.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in LogiSphere, allowing attackers to retrieve arbitrary files from the vulnerable system. It includes example URLs demonstrating the exploit but lacks executable code.
Description
Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2) "..." (triple dot), and (3) "..//" sequences in the URL, (4) "../" sequences in the source parameter to viewsource.jsp, or (5) "..\" (dot dot backslash) sequences in the NS-query-pat parameter to the search URL. URL.
Exploits (3)
The provided text describes a directory traversal vulnerability in LogiSphere, allowing attackers to retrieve arbitrary files from the vulnerable system. It includes example URLs demonstrating the exploit but lacks executable code.
This exploit demonstrates a directory traversal vulnerability in LogiSphere, allowing an attacker to retrieve arbitrary files from the vulnerable system by manipulating the 'source' parameter in the URL. The provided example fetches the 'boot.ini' file, confirming the vulnerability.
This exploit demonstrates a directory traversal vulnerability in LogiSphere, allowing an attacker to retrieve arbitrary files from the vulnerable system by manipulating the 'NS-query-pat' parameter. The provided URL example shows how to access the 'boot.ini' file by traversing directories.