Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1169. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in SCI Photo Chat 3.4.9 and prior versions. By manipulating the URL path, an attacker can access sensitive files like boot.ini outside the intended directory.
Description
Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot forward slash) in the GET command.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in SCI Photo Chat 3.4.9 and prior versions. By manipulating the URL path, an attacker can access sensitive files like boot.ini outside the intended directory.