AppWeb - Authentication Bypass Detection

The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c. With a forged HTTP request, it is possible to bypass authentication for the form and digest login types. !/usr/bin/env python3 -- coding: utf-8 -- """The...

AC Smart II - Authentication Bypass Detection

AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """AC...

JobMonster < 4.5.2.9 - Cross-Site Scripting Detection

In the theme JobMonster 4.5.2.9 there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests. !/usr/bin/env python3 -- coding: utf-8 -- """In the theme JobMonster 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Candidate Application Form <= 1.3 - Local File Inclusion Detection

WordPress Candidate Application Form = 1.3 is susceptible to arbitrary file downloads because the code in downloadpdffile.php does not do any sanity checks. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Candidate Application Form = 1.""" import re from kittysploit import from...

WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting Detection

WordPress Pondol Form to Mail 1.1 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authenticati...

Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion Detection

A directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the...

WordPress Solid Security < 9.0.1 - Unauthenticated Login Page Disclosure Detection

WordPress Solid Security formerly iThemes Security/Better WP Security plugin before 9.0.1 is vulnerable to login page disclosure. When the Hide Backend feature is enabled and comments require user registration, the secret login URL token is exposed in the HTML source via the itsec-hb-token...

WordPress Contact Form 7 - Full Path Disclosure Detection

The WordPress Contact Form 7 plugin was detected to be vulnerable to Full Path Disclosure, where direct access to PHP files revealed the full server filesystem path and could aid further exploitation. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress Contact Form 7 plugin was detected to...

WordPress Contact Form - Full Path Disclosure Detection

WordPress Contact Form plugin files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form plugin files are publicly accessible without...

WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting Detection

WordPress Contact Form 7 Captcha plugin before 0.1.2 contains a reflected cross-site scripting vulnerability. It does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Contact Form 7 Captcha plugin before...

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload Detection

The plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """The plugin does not validate signatures when creating them on the server from user input...

Jenkin Audit Trail <=3.2 - Cross-Site Scripting Detection

Jenkins Audit Trail 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Jenkins Audit Trail 3.""" from kittysploit import from...

WordPress Visual Form Builder <3.0.8 - Information Disclosure Detection

WordPress Visual Form Builder plugin before 3.0.8 contains a information disclosure vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint. !/usr/bin/env python3 --...

Haraj 3.7 - Cross-Site Scripting Detection

Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Haraj 3.""" from kittysploit import from...

Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion Detection

A directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the view parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A...

WordPress Church Admin <0.810 - Cross-Site Scripting Detection

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/churchadmin-registration-form/. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Church Admin plugin before 0.""" from kittysploit...

Divi Form Builder - Detect

Divi Form Builder is a premium WordPress form plugin by Divi Engine. !/usr/bin/env python3 -- coding: utf-8 -- """Divi Form Builder is a premium WordPress form plugin by Divi Engine.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting Detection

WordPress OpenID Connect Generic Client plugin 3.8.0 and 3.8.1 contains a cross-site scripting vulnerability. It does not sanitize the login error when output back in the login form, thereby not requiring authentication, which can be exploited with the default configuration. !/usr/bin/env python3...

Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting Detection

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting. !/usr/bin/env python3 -- coding: utf-8 -- """The Redirection for Contact Form 7 WordPress plugin before 2.""" from...

Orbeon Forms Exposure Detection

Detects exposed Orbeon Forms interfaces including Form Runner, Form Builder, and Quick Links. Orbeon Forms is a web forms solution that may expose sensitive form data and administrative interfaces if not properly secured. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Orbeon Forms...