Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2116. PoCs published by MaXe.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in SkyBlueCanvas 1.1 r237, allowing attackers with administrative privileges to access sensitive files by manipulating the 'dir' parameter in the URL. The provided example demonstrates traversing to the '/etc/' directory.
Description
Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter.
Exploits (1)
The exploit describes a directory traversal vulnerability in SkyBlueCanvas 1.1 r237, allowing attackers with administrative privileges to access sensitive files by manipulating the 'dir' parameter in the URL. The provided example demonstrates traversing to the '/etc/' directory.