Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5965. PoCs published by JosS.
AI-analyzed exploit summary This exploit checks for the existence of arbitrary files on a server running LokiCMS <= 0.3.4 by leveraging a path traversal vulnerability in the 'page' parameter of index.php. It sends an HTTP request and analyzes the response to determine if the file exists.
Description
Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. (dot dot) in the page parameter.
Exploits (1)
This exploit checks for the existence of arbitrary files on a server running LokiCMS <= 0.3.4 by leveraging a path traversal vulnerability in the 'page' parameter of index.php. It sends an HTTP request and analyzes the response to determine if the file exists.