Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3787. PoCs published by Janek Vind.
AI-analyzed exploit summary This exploit demonstrates a remote file disclosure vulnerability in Vivvo CMS 4.1.5.1 due to improper filtering of user-submitted data in the 'files.php' script. The attack bypasses directory traversal protections by using '.logs/./' to access sensitive files like configuration and database backups.
Description
files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two . (dot) characters, which is filtered into a "../" sequence.
Exploits (1)
This exploit demonstrates a remote file disclosure vulnerability in Vivvo CMS 4.1.5.1 due to improper filtering of user-submitted data in the 'files.php' script. The attack bypasses directory traversal protections by using '.logs/./' to access sensitive files like configuration and database backups.