Rockmongo Detection

The script sends a HTTP request to the server and attempts to extract the version from the reply. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MongoDB management tool exposure remote code execution vulnerability-vulnerability warning-the black bar safety net

MongoDB, the IT sector mainstream non-relational database NoSQL platform is one that is based on a table of a relational database of the popular alternatives. Recently, the management for MongoDB is a GUI tool phpMoAdmin is the storm has a very serious security vulnerability, once exploited, this...

RockMongo Cross Site Scripting and Directory Traversal Vulnerabilities

Rockmongo is prone to cross-site scripting XSS and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-5107

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ROCKLANG cookie, as demonstrated in a login.index action to index.php...

Directory traversal

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ROCKLANG cookie, as demonstrated in a login.index action to index.php...

CVE-2013-5107

RockMongo 1.1.5 and earlier is affected by CVE-2013-5107. The vulnerability is a directory traversal via the ROCK_LANG cookie, demonstrated in a login.index action to index.php, allowing remote attackers to read arbitrary files. Connected sources (NVD, OpenVAS, CVE repositories) confirm this as a...

CVE-2013-5107

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ROCKLANG cookie, as demonstrated in a login.index action to index.php...

CVE-2013-5108

Multiple cross-site scripting XSS vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 db parameter on the login page or 2 username parameter in a login.index action to index.php and other unspecified parameters...

CVE-2013-5108

RockMongo 1.1.5 and earlier contain multiple cross-site scripting (XSS) vulnerabilities in the xn function. The issues allow remote attackers to inject arbitrary scripts via the (1) db parameter on the login page or (2) username parameter in login.index to index.php and other unspecified paramete...

CVE-2013-5108

Multiple cross-site scripting XSS vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 db parameter on the login page or 2 username parameter in a login.index action to index.php and other unspecified parameters...