EasyPHP Devserver Insecure File Permissions Vulnerability

EasyPHP Devserver is a server developed by NodeJS, its goal is to assist in debugging some front-end effects that require server support. An insecure file permission vulnerability exists in EasyPHP Devserver version 16.1.1, which can be exploited by a local attacker to gain access to globally...

EasyPHP Devserver 16.1.1 - Insecure File Permissions Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Title: EasyPHP Devserver Insecure File Permissions Privilege Escalation Application: EasyPHP Devserver Versions Affected: 16.1 Vendor URL: http://www.easyphp.org/ Discovered by: Ashiyane Digital Security Team Micle Tested on: Windows 10...

EasyPHP Devserver 16.1.1 - Insecure File Permissions Privilege Escalation

Title: EasyPHP Devserver Insecure File Permissions Privilege Escalation Application: EasyPHP Devserver Versions Affected: 16.1 Vendor URL: http://www.easyphp.org/ Discovered by: Ashiyane Digital Security Team Micle Tested on: Windows 10 Professional x86 Bugs: Insecure File Permissions Privilege...

EasyPHP Devserver 16.1.1 - Insecure File Permissions Privilege Escalation

EasyPHP Devserver 16.1.1 - Insecure File Permissions Privilege Escalation Title: EasyPHP Devserver Insecure File Permissions Privilege Escalation Application: EasyPHP Devserver Versions Affected: 16.1 Vendor URL: http://www.easyphp.org/ Discovered by: Ashiyane Digital Security Team Micle Tested o...

EasyPHP Devserver Remote Command Execution Vulnerability

EasyPHP is a Windows Apache + Mysql + Perl/PHP/Python development kit , the package integrates PHP, Apache, MySQL, but also integrated a number of auxiliary development tools . A remote command execution vulnerability exists in EasyPHP Devserver running on port 1111, which can be exploited to...

EasyPHP Devserver 16.1.1 Cross Site Request Forgery / Remote Command Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYPHP-DEV-SERVER-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: =============== www.easyphp.org Product: ============================= EasyPHP Devserver v16.1.1...

EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery / Remote Command Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYPHP-DEV-SERVER-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: =============== www.easyphp.org Product: ============================= EasyPHP Devserver v16.1.1...