{"uuid": "529b4538-ee63-4f01-aac3-436939afe857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44665", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/44782", "content": "Exploit Collector\nXerte 3.10.3 Directory Traversal\n\nhttps://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png \nXerte versions 3.10.3 and below suffer from a directory traversal vulnerability.\n\nMD5 | 26e7456440c05b36c8a1440493e0c60b\n\nDownload\n# Exploit Title: Xerte 3.10.3 - Directory Traversal (Authenticated)\n# Date: 05/03/2021\n# Exploit Author: Rik Lutz\n# Vendor Homepage: https://xerte.org.uk\n# Software Link: https://github.com/thexerteproject/xerteonlinetoolkits/archive/refs/heads/3.9.zip\n# Version: up until 3.10.3\n# Tested on: Windows 10 XAMP\n# CVE : CVE-2021-44665\n\n# This PoC assumes guest login is enabled. Vulnerable url:\n# https:// visit \"Properties\" (! symbol) -> Media and Quota -> Click file to download\n# The userfiles-direcotry will be noted in the URL and/or when you download a file.\n# They look like: ", "creation_timestamp": "2026-09-06T07:00:05.960222Z"}