CVE-2012-5100
HServer 0.1.1 - Path Traversal via Encoded Dot-Dot-Backslash Sequences
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-5100. PoCs published by demonalex.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in HServer 0.1.1 by using URL-encoded sequences (e.g., ..%5c) to access arbitrary files outside the web root. The PoC provides example URLs to retrieve sensitive files like boot.ini and hosts.
Description
Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot dot encoded backslash) or (2) %2e%2e%5c (encoded dot dot backslash) in the PATH_INFO.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in HServer 0.1.1 by using URL-encoded sequences (e.g., ..%5c) to access arbitrary files outside the web root. The PoC provides example URLs to retrieve sensitive files like boot.ini and hosts.