CVE-2013-2474

HIGH

AWS XMS 2.5 - Path Traversal via 'what' Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-2474. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary The exploit demonstrates a path traversal vulnerability in AWS XMS 2.5 via the 'what' parameter in importer.php, allowing arbitrary file reads. Techniques include NULL-byte injection and path normalization to bypass protections.

Description

Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter.

Exploits (1)

exploitdb WORKING POC
by High-Tech Bridge SA · textwebappsphp
https://www.exploit-db.com/exploits/24906

The exploit demonstrates a path traversal vulnerability in AWS XMS 2.5 via the 'what' parameter in importer.php, allowing arbitrary file reads. Techniques include NULL-byte injection and path normalization to bypass protections.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: AWS XMS 2.5 and prior
No auth needed
Prerequisites: Network access to the target · Wget or similar HTTP client
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/58753
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/24906
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/83062

Scores

CVSS v3 7.5
EPSS 0.1001
EPSS Percentile 95.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
aws-dms/aws_xms 2.5
Published Jan 27, 2020
Tracked Since Feb 18, 2026