CVE-2016-4004

This repository contains a functional Python script that exploits arbitrary file read vulnerabilities in Dell OpenManage Server Administrator (OMSA) by leveraging authentication bypass and path traversal techniques. The script tests for multiple CVEs (CVE-2016-4004, CVE-2020-5377, CVE-2021-21514) and retrieves file contents from the target system.

This exploit demonstrates an authenticated directory traversal vulnerability in Dell OpenManage Server Administrator 8.2. By manipulating the URL parameters, an attacker can read arbitrary files on the target system.