CVEs-PoC/2008/CVE-2008-2863.md

CVE-2008-2863

Description

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to (1) folderdel_.asp or (2) foldernew.asp in cms/assetmanager/.

POC

Reference

• http://securityreason.com/securityalert/3957
• http://www.bugreport.ir/?/45
• https://www.exploit-db.com/exploits/5859

Github

No PoCs found on GitHub currently.