Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4510. PoCs published by Andy Davis.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Portfolio Netpublish Server 7, allowing an attacker to retrieve arbitrary files by manipulating the 'template' parameter in the URL. The provided example fetches the 'boot.ini' file, confirming the vulnerability.
Description
Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in the template parameter.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Portfolio Netpublish Server 7, allowing an attacker to retrieve arbitrary files by manipulating the 'template' parameter in the URL. The provided example fetches the 'boot.ini' file, confirming the vulnerability.