Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-10037. PoCs published by Houssamix. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a local directory traversal vulnerability in DomPHP <= v0.83. By manipulating the 'url' parameter, an attacker can traverse directories and potentially access sensitive files.
Description
Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php.
Exploits (1)
This exploit demonstrates a local directory traversal vulnerability in DomPHP <= v0.83. By manipulating the 'url' parameter, an attacker can traverse directories and potentially access sensitive files.