Novel Escape from the SPX jungle - Path traversal in PHP-SPX (CVE-2024-42007)

Novel Escape from the SPX jungle - Path traversal in PHP-SPX (CVE-2024-42007)

OS

2024.1.*
2020.3.*
2019.4.*

Screenshots from the blog posts

images/clz8cvc0n8ev31hmza5715abw.jpgimages/clz8cvc0n8ev31hmza5715abw.jpg

Summary

In this post, we will learn about an interesting path traversal vulnerability in PHP-SPX. We will understand how the exploit functions and how the vulnerable target can be exploited. Since the exploit is written in Golang, it makes it a perfect candidate for mass scanning of the vulnerable asse!

general

Description

@secatgourity

190 posts

Total vcoins

123.8K

Social media links

Comments (0)