Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3306. PoCs published by Rew.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in Weborf httpd <= 0.12.2 due to improper sanitization of URL paths. The PoC uses URL-encoded '../' sequences to bypass the flawed strReplace function and access arbitrary files like /etc/passwd.
Description
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI.
Exploits (1)
The exploit demonstrates a directory traversal vulnerability in Weborf httpd <= 0.12.2 due to improper sanitization of URL paths. The PoC uses URL-encoded '../' sequences to bypass the flawed strReplace function and access arbitrary files like /etc/passwd.