Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0325. PoCs published by Danny Moules.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Ninja Blog 4.8, allowing an attacker to read arbitrary files outside the intended directory by manipulating the 'cat' parameter in the URL.
Description
Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Ninja Blog 4.8, allowing an attacker to read arbitrary files outside the intended directory by manipulating the 'cat' parameter in the URL.