Lucene search
+L

6 matches found

Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•196 views

WebNMS Framework Server Arbitrary Text File Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebNMS Framework Server Arbitrary Text File Download', 'Description' = %q This module abuses a vulnerability in WebNMS Framework Server 5.2 that...

7.5CVSS7AI score0.97415EPSS
SaveExploits10
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•216 views

WebNMS Framework Server Credential Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebNMS Framework Server Credential Disclosure', 'Description' = %q This module abuses two vulnerabilities in WebNMS Framework Server 5.2 to extra...

9.8CVSS7AI score0.97415EPSS
SaveExploits11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/23 12:00 a.m.•5 views

CVE-2016-6601: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a .. dot dot in the fileName parameter to servlets/FetchFile...

7.5CVSS6AI score0.97415EPSS
SaveExploits10References2
seebug.org
seebug.org
•added 2016/08/30 12:00 a.m.•48 views

WebNMS Framework 5.2SP1 Text File Download

Summary WebNMS is an industry-leading used to build network management applications architecture. The File Download feature does not require login you can download any text, non-binary file. Vulnerability details FetchFile to allow not logged in download the file, but only the text content of the...

5CVSS8.6AI score0.97415EPSS
SaveExploits10
Metasploit
Metasploit
•added 2016/07/04 12:00 a.m.•84 views

WebNMS Framework Server Arbitrary Text File Download

This module abuses a vulnerability in WebNMS Framework Server 5.2 that allows an unauthenticated user to download files off the file system by using a directory traversal attack on the FetchFile servlet. Note that only text files can be downloaded properly, as any binary file will get mangled by...

7.5CVSS7.3AI score0.97415EPSS
SaveExploits10
zdt
zdt
•added 2008/11/25 12:00 a.m.•38 views

SimpleBlog 3.0 (simpleBlog.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= SimpleBlog 3.0 simpleBlog.mdb Database Disclosure Vulnerability ================================================================= » SimpleBlog 3.0 Mdb Vulnerability » »...

7.1AI score
SaveExploits0
Rows per page
Query Builder