CVE-2018-15745

This exploit demonstrates an unauthenticated directory traversal vulnerability in Argus Surveillance DVR 4.0.0.0 via the WEBACCOUNT.CGI RESULTPAGE parameter, allowing arbitrary file disclosure. The PoC uses a curl command to retrieve the system.ini file from a Windows system.

This repository contains a functional exploit for CVE-2018-15745, a directory traversal vulnerability in Argus Surveillance DVR 4.0.0.0. The exploit automates the process of encoding directory paths and sending a crafted GET request to retrieve arbitrary files from the target system.

This Metasploit module exploits an unauthenticated directory traversal vulnerability (CVE-2018-15745) in Argus Surveillance DVR 4.0.0.0, allowing arbitrary file read via a crafted HTTP request.