Aspen HTTP Server Detection

Binary data aspenwebdetect.nbin...

Aspen < 0.22 Directory Traversal

According to its banner, the version of Aspen running on the remote host is prior to 0.22. It is, therefore, affected by a directory traversal vulnerability due to improper sanitization of user-supplied input. Note that Nessus has not tested for this issue but has instead relied only on the...

Aspen: Session does't get expired after changing the password in https://readthedocs.org

Session does't get expired after changing the password in https://readthedocs.org...

Aspen: Email Spoofing

There is an Email Spoofing Vulnerability. Steps to reproduce: 1 Go to http://emkei.cz/ 2 Fill "From Email" field to [email protected] or any other aspen email. 3 Fill the victim's address your address to "TO" field and fill in other details as you wish. You will receive email from aspen admin...

Aspen: client_secret Token disclosure

Greetings, I think I've discovered a clientsecret token disclosure. Proof of concept: 1. Go to https://github.com/AspenWeb/experimental-javascript-version/blob/master/www/blog/index.html 2. At the line 6, a clientsecret token it's disclosed...

aspenavionics.com XSS vulnerability

Vulnerable URL: http://aspenavionics.com/search?q=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1168289 VIP website status:| No Coordinated...

aspenavionics.com XSS vulnerability

Vulnerable URL: https://www.aspenavionics.com/search?q=%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

aspen-ruggerfest.com XSS vulnerability

Vulnerable URL: http://aspen-ruggerfest.com/wp-content/themes/ruggerfest/js/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

Gratipay: upgrade Aspen on inside.gratipay.com to pick up CR injection fix

1 Using IE11, open DevTools and start network capture 2 visit the following URL: http://inside.gratipay.com/assets/%0dSet-Cookie:%20qwe=qwe%0dq 3 find a 'qwe' cookie set in the response There is a 0x0d character injected, which can be used as a header delimiter in IE. To see this behaviour using...

aspen-ruggerfest.com XSS vulnerability

Vulnerable URL: http://aspen-ruggerfest.com/wp-content/themes/ruggerfest/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

Aspen 0.8 - Directory Traversal

No description provided by source. Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign -...

CVE-2013-2619

Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...

Directory traversal

Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...

CVE-2013-2619

Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. dot dot to the default URI...

CVE-2013-2619

CVE-2013-2619 affects Aspen servers prior to 0.22, with a directory traversal vulnerability that allows an attacker to read arbitrary files via a .. to the default URI. The issue is tied to improper sanitization in Aspen’s handling of path input. Public references confirm this is a remote, exploi...

Aspen Server < 0.22 Directory Traversal Vulnerability - Active Check

Aspen Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Aspen 0.8 - Directory Traversal

Aspen 0.8 - Directory Traversal Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign -...

Aspen 0.8 - Directory Traversal

Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign - 18/03/2013 CVE Number - CVE-2013-2619...

Aspen 0.8 - Directory Traversal

Exploit for multiple platform in category web applications The vulnerability happens when directory indexing is turned on default configuration in this version and a user requests, for instance localhost/../../../../../../../etc/passwd. The vulnerability may be tested with the following...

Aspen 0.8 Directory Traversal

Aspen 0.8 - Directory Traversal Earlier versions are also possibly vulnerable. INFORMATION Product: Aspen 0.8 Remote-exploit: yes Vendor-URL: http://www.zetadev.com/software/aspen/ Discovered by: Daniel Ricardo dos Santos CVE Request - 15/03/2013 CVE Assign - 18/03/2013 CVE Number - CVE-2013-2619...