Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2285. PoCs published by Alkomandoz Hacker.
AI-analyzed exploit summary This exploit leverages a file disclosure vulnerability in ext 1.0 alpha1's feed-proxy.php script. The script reads and outputs the content of a file specified via the 'feed' parameter without proper validation, allowing directory traversal attacks.
Description
Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a .. (dot dot) in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent.
Exploits (1)
This exploit leverages a file disclosure vulnerability in ext 1.0 alpha1's feed-proxy.php script. The script reads and outputs the content of a file specified via the 'feed' parameter without proper validation, allowing directory traversal attacks.