Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3425. PoCs published by GoLd_M.
AI-analyzed exploit summary This exploit demonstrates a remote file disclosure vulnerability via path traversal and a remote file inclusion vulnerability in MAXcms 3.11.20b. The PoC shows how arbitrary files can be read or included by manipulating the `thCMS_root` and `fm_includes_special` parameters.
Description
Directory traversal vulnerability in includes/inc.thcms_admin_dirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMS_root parameter.
Exploits (1)
This exploit demonstrates a remote file disclosure vulnerability via path traversal and a remote file inclusion vulnerability in MAXcms 3.11.20b. The PoC shows how arbitrary files can be read or included by manipulating the `thCMS_root` and `fm_includes_special` parameters.