EDB-19408

PoC

Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure

view exploit source exploit_dbtype webappsauthor SEC Consultpublished 2012-06-27catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-3363US	critical9.1	49.3% (99th)	Exploit	2013-02-13
Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files o…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.