DidiWiki - Path Traversal Detection (CVE-2013-7448)

Detects CVE-2013-7448 by requesting /api/page/get?page=../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """DidiWiki api/page/get path traversal CVE-2013-7448.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Debian GNU/Linux File Read

The vulnerability of the wiki.c function in DidiWiki’s kernel is related to deficiencies in pathname restrictions for the catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files through the api/page/get parameter...

CVE-2013-7448

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

CVE-2013-7448: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

PT-2016-1596

Name of the Vulnerable Software and Affected Versions DidiWiki affected versions not specified Description The issue is related to a directory traversal vulnerability in the wiki.c component of DidiWiki. This vulnerability allows remote attackers to read arbitrary files by exploiting the page...