FlatnuX CMS - Directory Traversal Detection

A path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. !/usr/bin/env python3 -- coding: utf-8 -- """A path traversal vulnerability in controlcenter.""...

Joomla! Component redSHOP 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the redSHOP comredshop...

Personal Weather Station Dashboard 12 - Directory Traversal Detection

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext. !/usr/bin/env python3 -- coding: utf-8 -- """Person...

Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion Detection

A directory traversal vulnerability in the AlphaUserPoints comalphauserpoints component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

WordPress Yoast SEO - Full Path Disclosure Detection

WordPress Yoast SEO plugin is vulnerable to full path disclosure via direct access to plugin files. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Yoast SEO plugin is vulnerable to full path disclosure via direct access to plugin files.""" from kittysploit import from...

Service Account Credentials File Disclosure Detection

Service Account Credentials internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Service Account Credentials internal file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Service Account...

Magento Unprotected development files Detection

Magento version 1.9.2.x includes /dev directories or files that might reveal your passwords and other sensitive information. The /dev directories and files are not protected by default. According to Magento, "these tests are not supposed to end up on production servers". !/usr/bin/env python3 --...

Prime Mover < 1.9.3 - Sensitive Data Exposure Detection

Prime Mover plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.2 via directory listing in the 'prime-mover-export-files/1/' folder. This makes it possible for unauthenticated attackers to extract sensitive data including site and...

SonicWall SMA1000 LFI Detection

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. !/usr/bin/env python3 -- coding: utf-8 -- """Pre-authentication path traversal vulnerabilit...

SearchBlox <9.2.2 - Local File Inclusion Detection

SearchBlox prior to version 9.2.2 is susceptible to local file inclusion in FileServlet that allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the...

Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion Detection

A directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion Detection

A directory traversal vulnerability in the Deluxe Blog Factory comblogfactory component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

Joomla! Component com_blog - Directory Traversal Detection

A directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in index.""" import re fr...

Joomla! Component NoticeBoard 1.3 - Local File Inclusion Detection

A directory traversal vulnerability in the Code-Garage NoticeBoard comnoticeboard component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8...

Joomla! Component com_abbrev - Local File Inclusion Detection

A directory traversal vulnerability in the Abbreviations Manager comabbrev component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Sensitive Configuration Files Listing - Detect

Listing of sensitive configuration files containing items such as usernames, passwords, and IP addresses was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Listing of sensitive configuration files containing items such as usernames, passwords, and IP addresses was d.""" from kittysploit...

Joomla! Component Photo Battle 1.0.1 - Local File Inclusion Detection

A directory traversal vulnerability in the Photo Battle comphotobattle component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Photo Battle comphotobatt...

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion Detection

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf...

Joomla! Component Matamko 1.01 - Local File Inclusion Detection

A directory traversal vulnerability in the Matamko commatamko component 1.01 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Matamko...

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion Detection

A directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...