CVEs-PoC/2014/CVE-2014-0780.md

CVE-2014-0780

Description

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

POC

Reference

• https://www.exploit-db.com/exploits/42699/
• https://www.exploit-db.com/exploits/42699/

Github

• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors