CVEs-PoC/2008/CVE-2008-7055.md

CVE-2008-7055

Description

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

POC

Reference

• https://www.exploit-db.com/exploits/6301

Github

No PoCs found on GitHub currently.