CVEs-PoC/2008/CVE-2008-6002.md

CVE-2008-6002

Description

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when register_globals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter.

POC

Reference

• https://www.exploit-db.com/exploits/6556
• https://www.exploit-db.com/exploits/6556

Github

No PoCs found on GitHub currently.