CVE-2014-1841 PoC — South River Titan FTP Server Web界面目录遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1841.yaml

Associated Vulnerability

Title:South River Titan FTP Server Web界面目录遍历漏洞 (CVE-2014-1841)
Description:Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. (dot dot) in the src parameter.

Description

Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability in the Move function. Remote attackers can copy the complete home folder of another user by exploiting the ../ path traversal in the search-bar value, allowing unauthorized access to sensitive user data.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →