ExploitPublished
Camaleon CMS v2.9.0 · Path Traversal
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 6 May 2026, 02:38 UTC
What to do
AI-suggested
Until an official fix is released, restrict access to the CMS and sensitive directories, and monitor for exploitation attempts using the known Python exploit code as a reference.
Description
Camaleon CMS v2.9.0 - Path Traversal
Indicators of compromise
Exploit source code
# Exploit Title: Camaleon CMS v2.9.0 - Path Traversal
# Date: 2026-02-02
# Exploit Author: Sakshi Velampudi (CyberQuestor)
# Vendor Homepage: https://github.com/owen2345/camaleon-cms
# Software Link: https://github.com/owen2345/camaleon-cms/releases/tag/2.9.0
# Version: <= 2.9.0
# Tested on: Linux
# CVE: CVE-2024-46987
# Authentication: Required (auth_token cookie)
# --------------------------------------------------
# Description
# Sends a single HTTP GET request to a vulnerable private file d…References
Community reviews
Loading reviews…