CVE-2023-34834

A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint...

CVE-2023-34834

A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint...

CVE-2023-34834

A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint...

CVE-2023-34834

A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint...

CVE-2023-34834

A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint...

CVE-2023-34834

CVE-2023-34834 affects MCL-Net v4.3.5.8788 running on port 5080, with a Directory Browsing issue that exposes sensitive database information via the /file endpoint. Connected sources describe an information-disclosure path where the /file directory and files like AdoInfo.txt reveal database conne...

MCL-Net 4.3.5.8788 Information Disclosure

Exploit Title: MCL-Net 4.3.5.8788 - Information Disclosure Date: 5/31/2023 Exploit Author: Victor A. Morales, GM Sectec Inc. Vendor Homepage: https://www.mcl-mobilityplatform.com/net.php Version: 4.3.5.8788 other versions may be affected Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-34834...

MCL-Net 4.3.5.8788 - Information Disclosure Vulnerability

Exploit Title: MCL-Net 4.3.5.8788 - Information Disclosure Exploit Author: Victor A. Morales, GM Sectec Inc. Vendor Homepage: https://www.mcl-mobilityplatform.com/net.php Version: 4.3.5.8788 other versions may be affected Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-34834 Description:...

MCL-Net 4.3.5.8788 - Information Disclosure

Exploit Title: MCL-Net 4.3.5.8788 - Information Disclosure Date: 5/31/2023 Exploit Author: Victor A. Morales, GM Sectec Inc. Vendor Homepage: https://www.mcl-mobilityplatform.com/net.php Version: 4.3.5.8788 other versions may be affected Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-34834...

Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

Impact Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. Patches Users can upgrade to v4.1.0 Workarounds Set dirbrowser.enable = False in the configuration. For instance, when using a Python dictionary to configure the...

GHSA-XX6G-JJ35-PXJV Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

Impact Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. Patches Users can upgrade to v4.1.0 Workarounds Set dirbrowser.enable = False in the configuration. For instance, when using a Python dictionary to configure the...

Cross-Site Scripting (XSS)

wsgidav is vulnerable to cross-site scripting. The vulnerability exists in the init function of dirbrowser.py when directory browsing is enabled which allows an attacker to inject and execute malicious JavaScript...

CVE-2022-41905

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

PYSEC-2022-43018

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

PT-2022-26136 · Wsgidav · Wsgidav

Name of the Vulnerable Software and Affected Versions: WsgiDAV versions prior to 4.1.0 Description: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue occurs when untrusted data is displayed in the directory...

CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

py-WsgiDAV -- XSS vulnerability

Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks...

CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting XSS attacks. This issue has been patched, users can upgrade to version 4.1.0. As a workaround, set dirbrowser.enable = Fal...

Security bulletin: Directory browsing vulnerability in IBM's Netezza Performance Portal 1.0.2 (CVE-2013-0470)

Abstract A vulnerability exists in IBM's Netezza Performance Portal that allows the application's directory structure to be browsed. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-0470 DESCRIPTION: Users of Netezza Performance Portal can access and list the contents of the application’s director...