Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-26252. PoCs published by Ghuliev.
AI-analyzed exploit summary This exploit demonstrates an authenticated directory traversal vulnerability in aaPanel 6.8.21, allowing an attacker to read arbitrary files such as the root user's private SSH key by manipulating the installation script path in an AJAX request.
Description
aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH key(id_rsa).
Exploits (1)
This exploit demonstrates an authenticated directory traversal vulnerability in aaPanel 6.8.21, allowing an attacker to read arbitrary files such as the root user's private SSH key by manipulating the installation script path in an AJAX request.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N