Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114678. PoCs published by Vartamtezidis Theodoros.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in copyparty versions <=1.8.2, allowing unauthorized access to files outside the web root via a crafted HTTP GET request to the `.cpr` subfolder. The PoC uses `curl` to retrieve `/etc/passwd` as proof of the vulnerability.
Description
copyparty 1.8.2 - Directory Traversal
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in copyparty versions <=1.8.2, allowing unauthorized access to files outside the web root via a crafted HTTP GET request to the `.cpr` subfolder. The PoC uses `curl` to retrieve `/etc/passwd` as proof of the vulnerability.