CVE-2007-1040

Xpression News 1.0.1 - Path Traversal

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1040. PoCs published by r0ut3r.

AI-analyzed exploit summary This exploit targets a file disclosure vulnerability in XNews 1.0.1 by manipulating the 'xnews-template' parameter to read arbitrary files (e.g., userdb.php). It sends a crafted HTTP GET request to leak usernames and MD5 hashes.

Description

Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include arbitrary files or obtain sensitive information via a .. (dot dot) in the xnews-template parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r0ut3r · perlwebappsphp

https://www.exploit-db.com/exploits/3332

View Code ZIP pw:eip

This exploit targets a file disclosure vulnerability in XNews 1.0.1 by manipulating the 'xnews-template' parameter to read arbitrary files (e.g., userdb.php). It sends a crafted HTTP GET request to leak usernames and MD5 hashes.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: XNews 1.0.1

No auth needed

Prerequisites: Network access to the target web server · XNews 1.0.1 installed with vulnerable archives.php

MITRE ATT&CK