CVE-2013-4900

This exploit demonstrates a directory traversal vulnerability in Twilight CMS 0.4.2 by using encoded backslashes (%5c) to traverse directories and access sensitive files like win.ini or user list.dat. The PoC provides example HTTP GET requests to exploit the flaw.

The exploit demonstrates a path traversal vulnerability in DeWeS web server (CVE-2013-4900) by sending crafted HTTP GET requests with directory traversal sequences (e.g., '..%5c') to read arbitrary files, such as 'C:/windows/win.ini' or 'userlist.dat'. The PoC uses netcat to exploit the vulnerability.