CVEs-PoC/2013/CVE-2013-4885.md

CVE-2013-4885

Description

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences.

POC

Reference

• http://packetstormsecurity.com/files/122719/TWSL2013-025.txt
• http://packetstormsecurity.com/files/122719/TWSL2013-025.txt

Github

No PoCs found on GitHub currently.