WebTester 5.x Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "WebTester 5.x Command Execution", 'Description' = %q This module exploits a command execution vulnerability in WebTester version 5.x...

WebTester 5.x Command Execution

This module exploits a command execution vulnerability in WebTester version 5.x. The 'install2.php' file allows unauthenticated users to execute arbitrary commands in the 'cpusername', 'cppassword' and 'cpdomain' parameters. Module Options msf use exploit/unix/webapp/webtester/exec msf...

WebTester 5.x - Multiple Vulnerabilities

========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

WebTester Multiple Vulnerabilities

WebTester is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

WebTester 5.x Multiple Vulnerabilities

WebTester 5.x Multiple Vulnerabilities suffer from SQL Injection Vulnerability, Arbitrary File Upload Vulnerability, PHPInfo Disclosure and Leftover install.php File. ========================================================================================== WebTester 5.x Multiple Vulnerabilities...

WebTester 5.x - Multiple Vulnerabilities

WebTester 5.x - Multiple Vulnerabilities ========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

WebTester 5.x SQL Injection / File Upload / Disclosure

========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to POST parameters to multiple files...

Sql injection

Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input...

CVE-2007-0970

Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input...

CVE-2007-0969

Multiple cross-site scripting XSS vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to POST parameters to multiple files...

CVE-2007-0969

CVE-2007-0969 affects WebTester 5.0.20060927 and earlier. Multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via POST parameters to multiple files. Impacts are described as partial confidentiality, integrity, and availability. Exploitation details are not p...

CVE-2007-0969

Multiple cross-site scripting XSS vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to POST parameters to multiple files...

CVE-2007-0970

CVE-2007-0970 affects WebTester 5.0.20060927 and earlier. Multiple SQL injection weaknesses allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php and via unspecified parameters to other files that accept GET/POST input. This can lead to data exposure ...

CVE-2007-0970

Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input...

WebTester 5.0.20060927 - typeID SQL Injection

WebTester 5.0.20060927 - typeID SQL Injection source: https://www.securityfocus.com/bid/22559/info WebTester is prone to multiple input-validation issues, including multiple cross-site scripting and multiple SQL-injection issues, because the application fails to properly sanitize user-supplied...

WebTester 5.0.2 sql injection and XSS vulnerabilities

Application: WebTester Web Site: http://www.webtester.us/ Versions: 5.0.20060927 and below Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting and SQL Injection Severity: high Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4...

WebTester 5.0.20060927 - 'typeID' SQL Injection

source: https://www.securityfocus.com/bid/22559/info WebTester is prone to multiple input-validation issues, including multiple cross-site scripting and multiple SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these...