MOVEit Transfer CVE-2023-34362 Detect

Detects Progress MOVEit Transfer instances exposing the CVE-2023-34362 attack surface: /moveitisapi/moveitisapi.dll?action=m2 header-smuggling path and guestaccess.aspx guest session workflow. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Progress MOVEit Transfer CVE-2023-34362 SQLi...

CVE-2015-7677

The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEitISAPI/MOVEitISAPI.dll...

Code injection

The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEitISAPI/MOVEitISAPI.dll...

PT-2016-3821

Name of the Vulnerable Software and Affected Versions Ipswitch MOVEit DMZ versions prior to 8.2 Description The issue allows remote authenticated users to enumerate FileIDs due to different error messages provided by the MOVEitISAPI service, depending on whether a FileID exists. This can be...

CVE-2015-7677: Exposure of Sensitive Information to an Unauthorized Actor

The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEitISAPI/MOVEitISAPI.dll...