CVE-2009-5114
NUCLEIiwork WebGlimpse < 2.18.7 - Path Traversal via DOC Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-5114. PoCs published by MustLive. A Nuclei detection template is also available.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in WebGlimpse 2.18.7, allowing attackers to retrieve arbitrary files via crafted requests with '../' sequences. The example URL demonstrates accessing '/etc/passwd' through the 'wgarcmin.cgi' script.
Description
Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the DOC parameter.
Exploits (1)
The exploit describes a directory traversal vulnerability in WebGlimpse 2.18.7, allowing attackers to retrieve arbitrary files via crafted requests with '../' sequences. The example URL demonstrates accessing '/etc/passwd' through the 'wgarcmin.cgi' script.