EDB-42290
PoCBOA Web Server 0.94.14rc21 - Arbitrary File Access
view exploit source exploit_dbtype webappsauthor Miguel Mendez Zpublished 2017-06-20catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-9833US | high7.5 | Exploit | ||
/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges. NOTE: multiple third parties rep… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan