Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-5862. PoCs published by nicx0, K3ysTr0K3R.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability by using URL-encoded sequences to access sensitive system files like 'sam' and 'boot.ini'. The attack leverages improper path sanitization to traverse outside the web root directory.
Description
Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the URI.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability by using URL-encoded sequences to access sensitive system files like 'sam' and 'boot.ini'. The attack leverages improper path sanitization to traverse outside the web root directory.
The repository contains a functional exploit for CVE-2008-5862, a directory traversal vulnerability in webcamXP versions 5.3.2.375 and 5.3.2.410. The exploit uses encoded dot-dot-slash sequences to traverse directories and read arbitrary files like boot.ini and sam.