CVE-2015-1577
u5CMS < 3.9.3 - Path Traversal and Arbitrary File Write via f Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-1577. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file deletion vulnerability in u5CMS 3.9.3 via the 'deletefile.php' script. The 'f' parameter is not properly sanitized, allowing directory traversal or absolute path manipulation to delete files with web server permissions.
Description
Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) .. (dot dot) or (2) full pathname in the f parameter.
Exploits (2)
This exploit demonstrates an arbitrary file deletion vulnerability in u5CMS 3.9.3 via the 'deletefile.php' script. The 'f' parameter is not properly sanitized, allowing directory traversal or absolute path manipulation to delete files with web server permissions.
This Python script exploits a buffer overflow vulnerability in Achat 0.150 beta7 by sending a crafted UDP packet with a malicious payload to trigger remote code execution (calc.exe). The payload is generated using msfvenom and includes a unicode-mixed encoder to bypass bad characters.