Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-5031. PoCs published by GulfTech Security.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in CakePHP version 1.1.7.3633, allowing attackers to retrieve arbitrary files by manipulating the 'file' parameter in a URL. The example demonstrates how to exploit the vulnerability by traversing directories and accessing files outside the intended directory.
Description
Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js filename.
Exploits (1)
The provided text describes a directory traversal vulnerability in CakePHP version 1.1.7.3633, allowing attackers to retrieve arbitrary files by manipulating the 'file' parameter in a URL. The example demonstrates how to exploit the vulnerability by traversing directories and accessing files outside the intended directory.