Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-1149. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in LoveCMS, including arbitrary file upload, remote/local file inclusion, and XSS. It includes a PoC URL for a local file inclusion exploit targeting '/etc/passwd'.
Description
Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the step parameter to install/index.php or (2) the load parameter to the top-level URI.
Exploits (2)
The provided text describes multiple vulnerabilities in LoveCMS, including arbitrary file upload, remote/local file inclusion, and XSS. It includes a PoC URL for a local file inclusion exploit targeting '/etc/passwd'.
The provided text describes multiple vulnerabilities in LoveCMS, including arbitrary file upload, remote/local file inclusion, and XSS. It includes a PoC URL for a local file inclusion attack to retrieve '/etc/passwd'.