Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-119289. PoCs published by Yakir Wizman.
AI-analyzed exploit summary This exploit demonstrates a path traversal vulnerability in WinTFTP Pro Server v3.1, allowing an attacker to read and write files outside the intended directory using the GET and PUT commands with relative path sequences (e.g., ../../). The proof-of-concept shows successful retrieval of the boot.ini file from a Windows XP system.
Description
WinTFTP Server Pro 3.1 - Directory Traversal
Exploits (1)
This exploit demonstrates a path traversal vulnerability in WinTFTP Pro Server v3.1, allowing an attacker to read and write files outside the intended directory using the GET and PUT commands with relative path sequences (e.g., ../../). The proof-of-concept shows successful retrieval of the boot.ini file from a Windows XP system.