Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0174. PoCs published by Luca Carettoni.
AI-analyzed exploit summary This is a vulnerability writeup describing multiple issues in Hummingbird Enterprise Collaboration, including arbitrary file upload, file download manipulation, and information disclosure via crafted HTTP GET requests. The example provided demonstrates an information leak of the server's internal IP address through a cookie.
Description
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie.
Exploits (1)
This is a vulnerability writeup describing multiple issues in Hummingbird Enterprise Collaboration, including arbitrary file upload, file download manipulation, and information disclosure via crafted HTTP GET requests. The example provided demonstrates an information leak of the server's internal IP address through a cookie.