CVEs-PoC/2016/CVE-2016-5049.md

CVE-2016-5049

Description

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the SESID parameter in conjunction with a filename in the FNAME parameter.

POC

Reference

• http://www.kb.cert.org/vuls/id/294272
• http://www.kb.cert.org/vuls/id/294272

Github

No PoCs found on GitHub currently.