WordPress Plugin WP Content Source Control - Directory Traversal Detection

A directory traversal vulnerability in the filegetcontents function in downloadfiles/download.php in the WP Content Source Control wp-source-control plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the path parameter. !/usr/bin/env python3...

WordPress Plugin DukaPress 2.5.2 - Directory Traversal Detection

A directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

Swim Team <= v1.44.10777 - Local File Inclusion Detection

The program /wp-swimteam/include/user/download.php allows unauthenticated attackers to retrieve arbitrary files from the system. !/usr/bin/env python3 -- coding: utf-8 -- """The program /wp-swimteam/include/user/download.""" import re from kittysploit import from lib.protocols.http.httpclient...

SAP NetWeaver Application Server Java 7.5 - Local File Inclusion Detection

SAP NetWeaver Application Server Java 7.5 is susceptible to local file inclusion in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS. This can allow remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note...

Rubedo CMS <=3.4.0 - Directory Traversal Detection

Rubedo CMS through 3.4.0 contains a directory traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI. !/usr/bin/env python3 -- coding...

Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion Detection

Zyxel VMG1312-B10D 5.13AAXA.8 is susceptible to local file inclusion. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences /../, conduct directory traversal attacks, and view arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel...

Processwire CMS <2.7.1 - Local File Inclusion Detection

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """Processwire CMS prior to 2.""" import re from kittysploit import from...

Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal Detection

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request. !/usr/bin/env python3 -- coding: utf-8 -- """There is a Directory traversal...

FreeIPA - XML Entity Injection Detection

Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. !/usr/bin/env python3 -- coding: utf-8 -- """Access to external...

Linx Sphere - Directory Traversal Detection

A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attackers to read arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the component SCS.""" from kittysploit import from...

Wavlink - Improper Access Control Detection

Wavlink WL-WN530H4 M30H4.V5030.210121 is susceptible to improper access control in the component /cgi-bin/ExportLogs.sh. An attacker can download configuration data and log files, obtain admin credentials, and potentially execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

DedeCMS 5.7.87 - Directory Traversal Detection

Directory traversal vulnerability in DedeCMS 5.7.87 allows reading sensitive files via the $activepath parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in DedeCMS 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Joomla! Component com_jashowcase - Directory Traversal Detection

A directory traversal vulnerability in the JA Showcase comjashowcase component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter in a jashowcase action to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Joomla! Component com_rokdownloads - Local File Inclusion Detection

A directory traversal vulnerability in the RokDownloads comrokdownloads component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory...

Joomla! Component Magic Updater - Local File Inclusion Detection

A directory traversal vulnerability in the Magic Updater comjoomlaupdater component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Magic...

Joomla! Component VJDEO 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the VJDEO comvjdeo component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the VJDEO...

Joomla! Component JProject Manager 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Ternaria Informatica JProject Manager comjprojectmanager component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Ultimate Portfolio comultimateportfolio component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability ...

Joomla! Component Arcade Games 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the Arcade Games comarcadegames component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the Arcad...

Joomla! Component BeeHeard 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the BeeHeard combeeheard and BeeHeard Lite combeeheardlite component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...