Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114526. PoCs published by HaHwul.
AI-analyzed exploit summary This Ruby script exploits a path traversal vulnerability in YESWIKI 0.2 by manipulating the 'squelette' parameter to read arbitrary files from the server. It constructs a malicious HTTP request to retrieve the contents of a specified file (e.g., /etc/passwd) and displays the response.
Description
YesWiki 0.2 - 'squelette' Directory Traversal
Exploits (1)
This Ruby script exploits a path traversal vulnerability in YESWIKI 0.2 by manipulating the 'squelette' parameter to read arbitrary files from the server. It constructs a malicious HTTP request to retrieve the contents of a specified file (e.g., /etc/passwd) and displays the response.