Share
## https://sploitus.com/exploit?id=A644E668-C1BF-535B-84C0-890F1600541B
# CVE-2024-42007 - php-spx Path Traversal Exploit
This repository contains a Python 3 proof-of-concept (PoC) script for CVE-2024-42007.
**Vulnerability Summary:**
> php-spx <= 0.4.15 suffers from a path traversal vulnerability via the `SPX_UI_URI` parameter, allowing unauthenticated attackers to read arbitrary files from the server.
## ๐ Usage
python3 CVE_2024_42007.py -t http://target -f /etc/passwd