Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2200. PoCs published by GoLd_M.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in Pagode 0.5.8's navigator_ok.php to disclose arbitrary files by manipulating the 'asolute' parameter. The vulnerability arises from insufficient input validation, allowing directory traversal sequences to access sensitive files like /etc/passwd.
Description
Directory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrary files via a .. (dot dot) in the asolute parameter.
Exploits (1)
This exploit leverages a path traversal vulnerability in Pagode 0.5.8's navigator_ok.php to disclose arbitrary files by manipulating the 'asolute' parameter. The vulnerability arises from insufficient input validation, allowing directory traversal sequences to access sensitive files like /etc/passwd.