27 matches found
DidiWiki - Path Traversal Detection (CVE-2013-7448)
Detects CVE-2013-7448 by requesting /api/page/get?page=../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """DidiWiki api/page/get path traversal CVE-2013-7448.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...
EUVD-2013-7212
Malware in sbrugna...
Debian: Security Advisory (DLA-424-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian GNU/Linux File Read
The vulnerability of the wiki.c function in DidiWiki’s kernel is related to deficiencies in pathname restrictions for the catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files through the api/page/get parameter...
[SECURITY] [DSA 3485-2] didiwiki security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3485-2 [email protected] https://www.debian.org/security/ Sebastien Delafond April 12, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3485-2] didiwiki security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3485-2 [email protected] https://www.debian.org/security/ Sebastien Delafond April 12, 2016 https://www.debian.org/security/faq -...
DSA-3485-2 didiwiki - regression update
Bulletin has no description...
DidiWiki Remote Version Detection
Detection of installed version of DidiWiki. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Didiwiki directory traversal vulnerability
didiwiki is a Wikipedia implementation written in C by software developer Matthew Allum, which is primarily used for personal records such as notes and to-do lists. A directory traversal vulnerability exists in didiwiki's wiki.c file, which stems from the failure of the api/page/get URI to...
CVE-2013-7448
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...
UBUNTU-CVE-2013-7448
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...
CVE-2013-7448
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...
DEBIAN-CVE-2013-7448
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...
CVE-2013-7448
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...
CVE-2013-7448
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...
CVE-2013-7448
CVE-2013-7448 concerns a path traversal in DidiWiki’s wiki.c, where the file-writer path in the API endpoint api/page/get fails to validate the page parameter, enabling remote attackers to read arbitrary files. Multiple connected sources reiterate the same vulnerability across various advisories ...
CVE-2013-7448: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...
Debian DLA-424-1 : didiwiki security update
Alexander Izmailov discovered that didiwiki, a wiki implementation, failed to correctly validate user-supplied input, thus allowing a malicious user to access any part of the filesystem. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security...
[SECURITY] [DLA 424-1] didiwiki security update
Package : didiwiki Version : 0.5-9+deb6u1 CVE ID : CVE-2013-7448 Debian Bug : 815111 Alexander Izmailov discovered that didiwiki, a wiki implementation, failed to correctly validate user-supplied input, thus allowing a malicious user to access any part of the filesystem...