CVE-2024-42007 PoC — SPX 安全漏洞

Description

Python exploit for CVE-2024-42007 — a path traversal vulnerability in php-spx <= 0.4.15 that allows arbitrary file read via SPX_UI_URI parameter.

介绍

# CVE-2024-42007 - php-spx Path Traversal Exploit

This repository contains a Python 3 proof-of-concept (PoC) script for CVE-2024-42007.

**Vulnerability Summary:**
> php-spx <= 0.4.15 suffers from a path traversal vulnerability via the `SPX_UI_URI` parameter, allowing unauthenticated attackers to read arbitrary files from the server.

## 🚀 Usage
python3 CVE_2024_42007.py -t http://target -f /etc/passwd

文件快照

备注