EIP-2026-112428
PRE-CVEStatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 - Arbitrary File Reading
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112428. PoCs published by spiderboy.
AI-analyzed exploit summary The exploit demonstrates an arbitrary file reading vulnerability in StatusNet/Laconica due to insufficient input validation in the 'doc.php' action. The 'title' parameter is directly used to construct a file path, allowing directory traversal attacks to read sensitive files like 'config.php' or '/etc/passwd'.
Description
StatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 - Arbitrary File Reading
Exploits (1)
The exploit demonstrates an arbitrary file reading vulnerability in StatusNet/Laconica due to insufficient input validation in the 'doc.php' action. The 'title' parameter is directly used to construct a file path, allowing directory traversal attacks to read sensitive files like 'config.php' or '/etc/passwd'.