Oqtane CMS Database - Detect

Detect which database distribution the target oqtane cms use. !/usr/bin/env python3 -- coding: utf-8 -- """Detect which database distribution the target oqtane cms use.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

PrestaShop Tech Detection

Detects PrestaShop Tech Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects PrestaShop Tech Detection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PrestaShop Tech Detection', 'description':...

Rhymix CMS Detect

Detects Rhymix CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Rhymix CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Rhymix CMS Detect', 'description': 'Detects Rhymix CMS', 'author': 'KittySploit Team...

Sitecore CMS - Detect

Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler URL pattern to the notfound.aspx page. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Sitecore Content Management System CMS websites based on a redirect from the sitecore media handler...

Subrion CMS Web Installer - Exposure Detection

Subrion CMS Web Installer has been exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Subrion CMS Web Installer has been exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Subrion CMS Web Installer - Exposur...

Tiki Wiki CMS Groupware 5.2 - Cross-Site Scripting Detection

Tiki Wiki CMS Groupware 5.2 contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks...

Umbraco CMS - Directory Listing Exposure Detection

Detected directory listing enabled on sensitive Umbraco CMS directories, potentially exposing configuration files, logs, backups, and other sensitive data. !/usr/bin/env python3 -- coding: utf-8 -- """Detected directory listing enabled on sensitive Umbraco CMS directories, potentially exposing...

Neos CMS Login Panel - Detect

Neos CMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Neos CMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Neos CMS Login Panel - Detect', 'description': 'Neos...

PayloadCMS - Detect

PayloadCMS panel was detected. PayloadCMS is an open-source, headless CMS and application framework built with Node.js, React, and TypeScript. !/usr/bin/env python3 -- coding: utf-8 -- """PayloadCMS panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Grav CMS Detect

Detects Grav CMS !/usr/bin/env python3 -- coding: utf-8 -- """Detects Grav CMS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Grav CMS Detect', 'description': 'Detects Grav CMS', 'author': 'KittySploit Team',...

Typo3 composer.json Exposure Detection

The web application is based on Typo3 CMS. A sensitive file has been found. Access to such files must be restricted, as it may lead to disclosure of sensitive information about the web application. !/usr/bin/env python3 -- coding: utf-8 -- """The web application is based on Typo3 CMS.""" from...

a-blog cms - Detect

Detects the presence of a-blog cms, a Content Management System. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of a-blog cms, a Content Management System.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Sitecore CMS - Cross-Site Scripting Detection

Sitecore CMS contains a cross-site scripting vulnerability via the "special way" of displaying XML Controls directly, which allows for a Cross Site Scripting Attack. !/usr/bin/env python3 -- coding: utf-8 -- """Sitecore CMS contains a cross-site scripting vulnerability via the "special way" of...

Shirne CMS 1.2.0 - Local File Inclusion Detection

Shirne CMS 1.2.0 is vulnerable to local file inclusion which could cause arbitrary file read via /static/ueditor/php/controller.php. !/usr/bin/env python3 -- coding: utf-8 -- """Shirne CMS 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Strapi CMS Documentation Login Panel - Detect

Strapi CMS Documentation login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strapi CMS Documentation login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strapi CMS...

CVE-2026-63303

A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash ../ sequences before resolving and serving the requested file. An authenticated attacker with admin privileges can use this vulnerability to read...

CVE-2026-63303 Path Traversal in Quick.CMS

A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash ../ sequences before resolving and serving the requested file. An authenticated attacker with admin privileges can use this vulnerability to read...

CVE-2026-63303

A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash ../ sequences before resolving and serving the requested file. An authenticated attacker with admin privileges can use this vulnerability to read...

CVE-2026-63303

Summary: CVE-2026-63303 describes a path traversal in Quick.CMS where the URI path component does not normalize ../ sequences, allowing an authenticated admin to read files in the webroot’s sibling directory. Affected product is Quick.CMS (component: URI handling). Underlying cause: failure to no...

CVE-2026-63303 Path Traversal in Quick.CMS

A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash ../ sequences before resolving and serving the requested file. An authenticated attacker with admin privileges can use this vulnerability to read...