EDB-33894

functional

Python CGIHTTPServer - Encoded Directory Traversal

view exploit source exploit_dbverifiedtype webappsauthor RedTeam Pentestingpublished 2014-06-27catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-4650US	critical9.8	23.9% (98th)	Exploit	2020-02-20
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script sou…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.