CVE-2023-31059-Repetier-Server-1.4.10-Unauthenticated-Path-Traversal

Repetier-Server |HTTP request with ..%5c traversal| BRepetier Server B -- Cbase/connectionLost.php C --|Unsanitized file parameter| DWindows Filesystem D -- ESensitive File E -- B B --|File contents in HTTP response| A Exploitation Example GET...

Repetier Server - Directory Traversal Detection

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php. !/usr/bin/env python3 -- coding: utf-8 -- """Repetier Server through 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

CVE-2023-31059

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php...

Directory traversal

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php...

CVE-2023-31059: Improper Limitation of a Pathname to a Restricted Directory

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php...

CVE-2023-31059

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php...