Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-5984. PoCs published by L4teral.
AI-analyzed exploit summary The exploit describes a denial-of-service vulnerability in AutoIndex PHP Script versions 2.2.2 and 2.2.3. The issue arises from improper handling of unexpected input, specifically a null byte (%00) in the 'dir' parameter, leading to excessive CPU consumption.
Description
classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."
Exploits (1)
The exploit describes a denial-of-service vulnerability in AutoIndex PHP Script versions 2.2.2 and 2.2.3. The issue arises from improper handling of unexpected input, specifically a null byte (%00) in the 'dir' parameter, leading to excessive CPU consumption.