EDB-33252

PoC

Cobbler 2.4.x < 2.6.x - Local File Inclusion

view exploit source exploit_dbtype webappsauthor Dolev Farhipublished 2014-05-08catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-3225USmedium4.0Exploit
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a pro…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan