Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2229. PoCs published by S(r1pt.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Kasseler CMS via the 'file' parameter in engine.php, allowing unauthorized file disclosure. It also includes an XSS vulnerability via the 'url' parameter in the redirect function.
Description
Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter during a download action, a different vector than CVE-2008-3087. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Kasseler CMS via the 'file' parameter in engine.php, allowing unauthorized file disclosure. It also includes an XSS vulnerability via the 'url' parameter in the redirect function.