Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50890. PoCs published by Chokri Hammedi.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Owlfiles File Manager 12.0.1, including path traversal, LFI, and XSS via crafted HTTP/FTP requests. It provides functional proof-of-concept requests and responses showing successful exploitation.
Description
Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers can exploit the vulnerability by crafting GET requests with directory traversal sequences to access restricted system directories on the device.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in Owlfiles File Manager 12.0.1, including path traversal, LFI, and XSS via crafted HTTP/FTP requests. It provides functional proof-of-concept requests and responses showing successful exploitation.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N