CVE-2019-25582
MEDIUMi-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25582. PoCs published by Ihsan Sencan.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file download vulnerability in i-doit CMDB 1.12 by manipulating the 'file' parameter in the 'file_manager' endpoint to retrieve sensitive files like 'src/config.inc.php'. The PoC includes a raw HTTP request showing the attack vector.
Description
i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php. Attackers can send GET requests to index.php with file_manager=image and supply arbitrary file paths like src/config.inc.php to retrieve configuration files and sensitive system data.
Exploits (1)
This exploit demonstrates an arbitrary file download vulnerability in i-doit CMDB 1.12 by manipulating the 'file' parameter in the 'file_manager' endpoint to retrieve sensitive files like 'src/config.inc.php'. The PoC includes a raw HTTP request showing the attack vector.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N