Authorization

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...

CVE-2017-6396

The CVE-2017-6396 entry concerns WPO-Foundation WebPageTest 3.0, where insufficient filtration of user-supplied data passed to webpagetest-master/www/compare-cf.php enables an attacker to execute arbitrary HTML/JavaScript in a victim browser (XSS). The vulnerability affects the specific URL path ...

WPO-Foundation WebPageTest Cross-Site Scripting Vulnerability

WebPagetest is a Web application that takes a URL and a set of configuration parameters as input and runs a performance test on that URL. A cross-site scripting vulnerability exists in WPO-Foundation WebPageTest, which occurs due to a failure to properly validate user-submitted data. The...

PT-2017-17037

Name of the Vulnerable Software and Affected Versions WPO-Foundation WebPageTest version 3.0 Description An issue exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. This allows an attacker to execute arbitrary HTML and script cod...

webpagetest <= 2.6 - Multiple Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-07-11 WebPagetest = 2.6 Multiple Vulnerabilities Script: WebPagetest provides a system for...

WebPageTest Arbitrary PHP File Upload

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

WebPagetest 'file' parameter Local File Disclosure Vulnerability

WebPagetest is prone to local file disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WebPagetest 2.7 Local File Disclosure

Author: TUNISIAN CYBER + Exploit Title: WebPagetest 2.7 LFD Vulnerability + Date: 24-12-2013 + Category: WebApp + Vendor: http://code.google.com/p/webpagetest/downloads/detail?name=webpagetest2.7.zip&can=2&q= + Google Dork: n/a + Tested on: KaliLinux/Debian 3.7.2 + Friend's blog:...

WebPageTest Directory Traversal

This module exploits a directory traversal vulnerability found in WebPageTest 2.6...

WebPagetest 2.6 LFI

Local file include vulnerability in WebPagetest about.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

WebPagetest 2.6 File Upload

File upload vulnerability in WebPagetest resultimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WebPagetest Detection

The remote host is running WebPagetest, a web-based tool written in PHP to test website performance. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62183; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

WebPagetest < 2.7.2 file Parameter Traversal Arbitrary File Access

The WebPagetest install hosted on the remote web server fails to sanitize user input to the 'file' parameter of the 'gettext.php' script of directory traversal sequences before using it to return the contents of a file. An unauthenticated, remote attacker can exploit this to view the contents of...

WebPageTest arbitrary php file upload-vulnerability warning-the black bar safety net

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 Msf::Exploit::Remo...

WebPagetest Multiple Input Validation Vulnerabilities

WebPagetest is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WebPageTest - Arbitrary '.PHP' File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "WebPageTest...

WebPageTest Arbitrary PHP File Upload

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "WebPageTest...

WebPageTest 2.6 Shell Upload / File Disclosure / File Deletion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-07-11 WebPagetest = 2.6 Multiple Vulnerabilities Script: "WebPagetest provides a system for testing the performance of web...