cve/2016/CVE-2016-5639.md

CVE-2016-5639

Description

Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.

POC

Reference

• https://www.exploit-db.com/exploits/40813/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/hulovebin/cve-2016-0805
• https://github.com/tafamace/CVE-2016-4438
• https://github.com/xfox64x/CVE-2016-5639