CVE-2011-0966
CiscoWorks Common Services < 3.3 - Unauthenticated Path Traversal via Audit Log File Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-0966. PoCs published by Sense of Security.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in Cisco Unified Operations Manager, including blind SQL injection, reflected XSS, and directory traversal. It provides specific exploit paths and technical details for each CVE.
Description
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.
Exploits (2)
This advisory details multiple vulnerabilities in Cisco Unified Operations Manager, including blind SQL injection, reflected XSS, and directory traversal. It provides specific exploit paths and technical details for each CVE.
This is a writeup describing a directory traversal vulnerability in CiscoWorks Common Services. It provides example URLs to exploit the vulnerability and access sensitive files, but does not include executable exploit code.