Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25352. PoCs published by numan türle.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in Crystal Live HTTP Server 6.01 by sending a crafted HTTP GET request with excessive '../' sequences to access the 'win.ini' file. The response confirms the vulnerability by returning the contents of the file, proving unauthorized file access.
Description
Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows system files.
Exploits (1)
The exploit demonstrates a directory traversal vulnerability in Crystal Live HTTP Server 6.01 by sending a crafted HTTP GET request with excessive '../' sequences to access the 'win.ini' file. The response confirms the vulnerability by returning the contents of the file, proving unauthorized file access.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N