CVE-2013-4547
LABnginx 0.8.41-1.4.3 and 1.5.x < 1.5.7 - URI Restriction Bypass via Unescaped Space Character
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-4547. PoCs published by Ivan Fratric, cyberharsh, rsp243.
AI-analyzed exploit summary The entry describes a remote security-bypass vulnerability in nginx versions 0.8.41 through 1.5.6, where an attacker can exploit a path traversal issue (e.g., `/file \0.php`) to bypass security restrictions. The technical details are minimal but reference a known vulnerability (CVE-2013-4547) with a specific exploit vector.
Description
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.
Exploits (3)
The entry describes a remote security-bypass vulnerability in nginx versions 0.8.41 through 1.5.6, where an attacker can exploit a path traversal issue (e.g., `/file \0.php`) to bypass security restrictions. The technical details are minimal but reference a known vulnerability (CVE-2013-4547) with a specific exploit vector.
This repository demonstrates CVE-2013-4547, a file parsing vulnerability in Nginx that allows bypassing file extension restrictions and accessing restricted paths by exploiting incorrect URI parsing. The PoC includes a Docker-based test environment and an upload page to showcase the vulnerability.
This repository contains a README file referencing a fix for CVE-2013-4547, a vulnerability in Nginx. No exploit code or detailed technical analysis is provided.