Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-23377. PoCs published by Miguel Santareno.
AI-analyzed exploit summary This is a writeup describing a Local File Inclusion (LFI) vulnerability in Archeevo 5.0. The PoC demonstrates how an unauthenticated attacker can access sensitive files like web.config by manipulating the file parameter in the error page URL.
Description
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.
Exploits (1)
This is a writeup describing a Local File Inclusion (LFI) vulnerability in Archeevo 5.0. The PoC demonstrates how an unauthenticated attacker can access sensitive files like web.config by manipulating the file parameter in the error page URL.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N