CVE-2017-16806

This exploit leverages a directory traversal vulnerability in Ulterius Server < 1.9.5.0 to retrieve arbitrary files, including the fileIndex.db which contains a list of all indexed files on the system. It can also download specific files by traversing directories via path manipulation.

This is a Python exploit for CVE-2017-16806, targeting a directory traversal vulnerability in Ulterius Server versions prior to 1.9.5.0. It allows arbitrary file access by leveraging path traversal sequences and can retrieve the fileIndex.db for further enumeration.

This Metasploit module exploits a directory traversal vulnerability in Ulterius Server to download arbitrary files, including the fileIndex.db which contains indexed file paths. It supports parsing the database to extract file paths or downloading specific files via path traversal.