CVE-2014-10037

NUCLEI

Domphp < 0.83 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php.

Exploits (1)

exploitdb WORKING POC

by Houssamix · textwebappsphp

https://www.exploit-db.com/exploits/30865

View Code ZIP pw:eip

Nuclei Templates (1)

DomPHP 0.83 - Directory Traversal

HIGHby daffainfo

References (3)

[Exploit] http://www.exploit-db.com/exploits/30865

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/90582

[Third Party Advisory, VDB Entry] http://osvdb.org/show/osvdb/102204

Scores

EPSS 0.6541

EPSS Percentile 98.5%

Details

CWE

CWE-22

Status published

Products (1)

domphp/domphp < 0.83

Published Jan 13, 2015

Tracked Since Feb 18, 2026