CVE-2008-2863
elinestudio site_composer < 2.6 - Path Traversal via inpCurrFolder Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2863. PoCs published by BugReport.IR.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in eLineStudio Site Composer (ESC) <=2.6, including SQL injection, XSS, and arbitrary folder deletion/creation. It provides functional proof-of-concept URLs for each vulnerability.
Description
Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in eLineStudio Site Composer (ESC) <=2.6, including SQL injection, XSS, and arbitrary folder deletion/creation. It provides functional proof-of-concept URLs for each vulnerability.