CVE-2016-0784

MEDIUM

Apache OpenMeetings <3.1.1 - Path Traversal

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-0784. PoCs published by Andreas Lindh.

AI-analyzed exploit summary The writeup describes a path traversal vulnerability in Apache OpenMeetings' Import/Export System Backups functionality, allowing arbitrary file write via specially crafted ZIP archives. This could lead to remote code execution by overwriting executable files.

Description

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.

Exploits (1)

exploitdb WRITEUP

by Andreas Lindh · textwebappslinux

https://www.exploit-db.com/exploits/39642

View Code ZIP pw:eip

The writeup describes a path traversal vulnerability in Apache OpenMeetings' Import/Export System Backups functionality, allowing arbitrary file write via specially crafted ZIP archives. This could lead to remote code execution by overwriting executable files.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Apache OpenMeetings 1.9.x - 3.1.0

Auth required

Prerequisites: Access to OpenMeetings Administration menu · Ability to upload ZIP archives

MITRE ATT&CK