CVE-2017-6527

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dnalimsfileretrieve.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:59+00:00| seen|...

dnaTools dnaLIMS 4-2015s13 Directory Traversal Nmap NSE Script

local http = require "http" local shortport = require "shortport" local stdnse = require "stdnse" local string = require "string" local vulns = require "vulns" local nmap = require "nmap" description = dnaLIMS is prone to the Directory Traversal attack. The viewAppletFsa.cgi seqID parameter is...

CVE-2017-6527

CVE-2017-6527 affects dnaTools dnaLIMS 4-2015s13. The vulnerability is a NUL-terminated directory traversal in the viewAppletFsa.cgi seqID parameter that allows an unauthenticated attacker to read files on the host accessible to the web server user. Public materials include PoCs and exploits (Met...