.. / CVE-2015-5688

• LFI
• Nuclei
• Web

Exploit for Geddy <13.0.8 - Local File Inclusion (CVE-2015-5688)

Description:

Geddy prior to version 13.0.8 contains a directory traversal vulnerability in lib/app/index.js that allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

Nuclei Template

View the template here CVE-2015-5688.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2015/CVE-2015-5688.yaml

References: