Joomla! Component Jfeedback 1.2 - Local File Inclusion Detection

A directory traversal vulnerability in the Ternaria Informatica Jfeedback! comjfeedback component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding:...

Joomla! Component MMS Blog 2.3.0 - Local File Inclusion Detection

A directory traversal vulnerability in the MMS Blog commmsblog component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A director...

Joomla! Component Shoutbox Pro - Local File Inclusion Detection

A directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Shoutbox Pro...

Joomla! Component JA Comment - Local File Inclusion Detection

A directory traversal vulnerability in the JA Comment comjacomment component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the JA Comment...

Joomla! Component LoginBox - Local File Inclusion Detection

A directory traversal vulnerability in the LoginBox Pro comloginbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the LoginBox Pro...

Alert Before Your Post <= 0.1.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in postalert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerabilit...

11in1 CMS 1.2.1 - Local File Inclusion (LFI) Detection

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. dot dot in the class parameter to 1 index.php or 2 admin/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple directory traversal vulnerabilities in...

WordPress Cab fare calculator < 1.0.4 - Local File Inclusion Detection

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues. !/usr/bin/env python3 -- coding: utf-8 -- """The Cab fare calculator WordPress plugin before 1.""" import re fro...

Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting Detection

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Cedar Gate EZ-NET...

Cuppa CMS v1.0 - Local File Inclusion Detection

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. !/usr/bin/env python3 -- coding: utf-8 -- """CuppaCMS v1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion Detection

The Grow by Tradedoubler WordPress plugin through version 2.0.21 is vulnerable to Local File Inclusion via the component parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those files. !/usr/bin/env python3 --...

Sangfor Next Gen Application Firewall - Arbitary File Read Detection

Sangfor Next Gen Application Firewall is susceptible to Local File Inclusion as it does not validate the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor Next Gen Application Firewall is susceptible to Local File Inclusion as it does not validate the file .""" import re from...

Surreal ToDo 0.6.1.2 - Local File Inclusion Detection

Surreal ToDo 0.6.1.2 is vulnerable to local file inclusion via index.php and the content parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Surreal ToDo 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

DedeCmsV5.6 Carbuyaction Fileinclude Detection

A vulnerability in DedeCMS's 'carbuyaction.php' endpoint allows remote attackers to return the content of locally stored files via a vulnerability in the 'code' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in DedeCMS's 'carbuyaction.""" from kittysploit import from...

Drupal Avatar Uploader - Cross-Site Scripting Detection

Drupal Avatar Uploader v7.x-1.0-beta8 plugin contains a cross-site scripting vulnerability in the slider import search feature and tab parameter via plugin settings. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal Avatar Uploader v7.""" from kittysploit import from lib.protocols.http.httpclie...

WordPress Finder - Cross-Site Scripting Detection

WordPress Plugin Finder contains a cross-site scripting vulnerability via the order parameter. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and laun...

YesWiki <2022-07-07 - Cross-Site Scripting Detection

YesWiki before 2022-07-07 contains a cross-site scripting vulnerability via the id parameter in the AccueiL URL. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki before 2022-07-07 contains a cross-site scripting vulnerability via the id parameter in the AccueiL UR.""" from kittysploit import...

NetMizer LogManagement System cmd.php - Remote Code Execution Detection

Remote Command Execution vulnerability in the NetMizer log management system cmd.php, and the attacker can execute the command by passing in the cmd parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Remote Command Execution vulnerability in the NetMizer log management system cmd.""" import ...

Cuppa CMS v1.0 - Local File Inclusion Detection

CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. !/usr/bin/env python3 -- coding: utf-8 -- """CuppaCMS v1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

Trixbox - 2.8.0.4 OS Command Injection Detection

Trixbox 2.8.0.4 is vulnerable to OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """Trixbox 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...