{"vulnerability": "CVE-2021-44665", "sightings": [{"uuid": "131fb18e-cf38-4c33-8407-32f17731ee07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44665", "type": "seen", "source": "https://t.me/cibsecurity/38067", "content": "\u203c CVE-2021-44665 \u203c\n\nA Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-25T00:20:19.000000Z"}, {"uuid": "be4894f1-cea8-4c2e-ac67-25976da22394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44665", "type": "seen", "source": "https://t.me/hacking_Attack/44782", "content": "Exploit Collector\nXerte 3.10.3 Directory Traversal\n\nhttps://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png \nXerte versions 3.10.3 and below suffer from a directory traversal vulnerability.\n\nMD5 | 26e7456440c05b36c8a1440493e0c60b\n\nDownload\n# Exploit Title: Xerte 3.10.3 - Directory Traversal (Authenticated)\n# Date: 05/03/2021\n# Exploit Author: Rik Lutz\n# Vendor Homepage: https://xerte.org.uk\n# Software Link: https://github.com/thexerteproject/xerteonlinetoolkits/archive/refs/heads/3.9.zip\n# Version: up until 3.10.3\n# Tested on: Windows 10 XAMP\n# CVE : CVE-2021-44665\n\n# This PoC assumes guest login is enabled. Vulnerable url:\n# https:// visit \"Properties\" (! symbol) -> Media and Quota -> Click file to download\n# The userfiles-direcotry will be noted in the URL and/or when you download a file.\n# They look like: ", "creation_timestamp": "2026-09-01T20:01:53.204136Z"}, {"uuid": "7b508263-5574-4b63-b10f-5948805d6ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44665", "type": "seen", "source": "https://t.me/hacking_Attack/44782", "content": "Exploit Collector\nXerte 3.10.3 Directory Traversal\n\nhttps://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png \nXerte versions 3.10.3 and below suffer from a directory traversal vulnerability.\n\nMD5 | 26e7456440c05b36c8a1440493e0c60b\n\nDownload\n# Exploit Title: Xerte 3.10.3 - Directory Traversal (Authenticated)\n# Date: 05/03/2021\n# Exploit Author: Rik Lutz\n# Vendor Homepage: https://xerte.org.uk\n# Software Link: https://github.com/thexerteproject/xerteonlinetoolkits/archive/refs/heads/3.9.zip\n# Version: up until 3.10.3\n# Tested on: Windows 10 XAMP\n# CVE : CVE-2021-44665\n\n# This PoC assumes guest login is enabled. Vulnerable url:\n# https:// visit \"Properties\" (! symbol) -> Media and Quota -> Click file to download\n# The userfiles-direcotry will be noted in the URL and/or when you download a file.\n# They look like: ", "creation_timestamp": "2026-09-02T01:02:06.860502Z"}, {"uuid": "529b4538-ee63-4f01-aac3-436939afe857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44665", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/44782", "content": "Exploit Collector\nXerte 3.10.3 Directory Traversal\n\nhttps://4.bp.blogspot.com/-Nd-X_KvCLtU/WWlu3jy7alI/AAAAAAAAIIw/wd38Z8AjxRAJh0AdUZMKadOiqPJQRSLMgCLcBGAs/s1600/h101.png \nXerte versions 3.10.3 and below suffer from a directory traversal vulnerability.\n\nMD5 | 26e7456440c05b36c8a1440493e0c60b\n\nDownload\n# Exploit Title: Xerte 3.10.3 - Directory Traversal (Authenticated)\n# Date: 05/03/2021\n# Exploit Author: Rik Lutz\n# Vendor Homepage: https://xerte.org.uk\n# Software Link: https://github.com/thexerteproject/xerteonlinetoolkits/archive/refs/heads/3.9.zip\n# Version: up until 3.10.3\n# Tested on: Windows 10 XAMP\n# CVE : CVE-2021-44665\n\n# This PoC assumes guest login is enabled. Vulnerable url:\n# https:// visit \"Properties\" (! symbol) -> Media and Quota -> Click file to download\n# The userfiles-direcotry will be noted in the URL and/or when you download a file.\n# They look like: ", "creation_timestamp": "2026-09-06T07:00:05.960222Z"}]}