EDB-41185

PoC

PHP PEAR 1.10.1 - Arbitrary File Download

view exploit source exploit_dbtype webappsauthor hyp3rlinxpublished 2017-01-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-5630UShigh7.5Exploit
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to ove…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan