CVE-2007-0389
ArsDigita Community System <3.4.10 & Education Solution 1.1 - Directory Traversal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-0389. PoCs published by Elliot Kendall.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in ArsDigita Community System due to improper input sanitization. It provides a URL example demonstrating how an attacker can retrieve arbitrary files like /etc/passwd.
Description
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Education Solution (ACES) 1.1, allows remote attackers to read arbitrary files via .%252e/ (double-encoded dot dot slash) sequences in the URI.
Exploits (1)
The exploit describes a directory traversal vulnerability in ArsDigita Community System due to improper input sanitization. It provides a URL example demonstrating how an attacker can retrieve arbitrary files like /etc/passwd.