Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-47899. PoCs published by numan türle.
AI-analyzed exploit summary This exploit demonstrates a Server-Side Request Forgery (SSRF) vulnerability in YetiShare File Hosting Script 5.1.0. The vulnerability arises from insufficient validation of user-supplied URLs in the remote file upload feature, allowing an attacker to read local files via the `file://` protocol.
Description
YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.
Exploits (1)
This exploit demonstrates a Server-Side Request Forgery (SSRF) vulnerability in YetiShare File Hosting Script 5.1.0. The vulnerability arises from insufficient validation of user-supplied URLs in the remote file upload feature, allowing an attacker to read local files via the `file://` protocol.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N