Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-118335. PoCs published by Yakir Wizman.
AI-analyzed exploit summary This PHP script exploits a path traversal vulnerability in Buffy FTP Server v1.3, allowing unauthorized file read, delete, and directory removal via crafted RETR, DELE, and RMD commands. It interacts with the FTP server using socket operations and supports passive mode for file retrieval.
Description
Buffy 1.3 - Directory Traversal
Exploits (1)
This PHP script exploits a path traversal vulnerability in Buffy FTP Server v1.3, allowing unauthorized file read, delete, and directory removal via crafted RETR, DELE, and RMD commands. It interacts with the FTP server using socket operations and supports passive mode for file retrieval.