Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114434. PoCs published by Mr.Un1k0d3r.
AI-analyzed exploit summary The exploit demonstrates an arbitrary file download vulnerability in XiVO 1.2's web interface, allowing unauthenticated attackers to retrieve sensitive files (e.g., /etc/passwd, /etc/shadow) via directory traversal in the 'id' parameter. The application runs with root privileges, exacerbating the impact.
Description
Xivo 1.2 - Arbitrary File Download
Exploits (1)
The exploit demonstrates an arbitrary file download vulnerability in XiVO 1.2's web interface, allowing unauthenticated attackers to retrieve sensitive files (e.g., /etc/passwd, /etc/shadow) via directory traversal in the 'id' parameter. The application runs with root privileges, exacerbating the impact.