cve/2013/CVE-2013-3739.md

CVE-2013-3739

Description

Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the mapname parameter in a show_config action.

POC

Reference

• http://www.exploit-db.com/exploits/26125

Github

No PoCs found on GitHub currently.