Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-0919. PoCs published by gbr, shinnai.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in MiniWebSvr 0.0.9a by sending a crafted HTTP GET request to retrieve the boot.ini file. It establishes a socket connection to the target server and sends the malicious request to leak sensitive system files.
Description
Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in MiniWebSvr 0.0.9a by sending a crafted HTTP GET request to retrieve the boot.ini file. It establishes a socket connection to the target server and sends the malicious request to leak sensitive system files.
This is a functional proof-of-concept for a directory traversal vulnerability in MiniWebsvr 0.0.7. It uses URL-encoded backslashes to traverse directories and access sensitive files like boot.ini or browse the filesystem.