CVE-2025-31131

This exploit demonstrates an unauthenticated path traversal vulnerability in YesWiki versions before 4.5.2. It abuses the 'squelette' parameter to read arbitrary files from the server, such as /etc/passwd, by injecting traversal sequences.

This is a functional exploit for CVE-2025-31131, an unauthenticated path traversal vulnerability in YesWiki < 4.5.2. The exploit reads arbitrary files via the `squelette` parameter and includes both a Python script for automated scanning and manual Burp Suite instructions.

This repository contains a Python-based exploit for CVE-2025-31131, a path traversal vulnerability in YesWiki versions prior to 4.5.2. The exploit allows unauthenticated attackers to read arbitrary files on the server by manipulating the 'squelette' parameter.