Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-1025. PoCs published by Todor Donev.
AI-analyzed exploit summary This Perl script exploits a file disclosure vulnerability in Enigma2 Webinterface versions 1.5.x, 1.6.x, and 1.7.x by sending crafted HTTP requests to retrieve arbitrary files from the target system. It checks the version and uses different payloads depending on the detected version.
Description
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.
Exploits (1)
This Perl script exploits a file disclosure vulnerability in Enigma2 Webinterface versions 1.5.x, 1.6.x, and 1.7.x by sending crafted HTTP requests to retrieve arbitrary files from the target system. It checks the version and uses different payloads depending on the detected version.