eduTrac - overview.php LFI Detection (CVE-2013-7097)

Detects CVE-2013-7097 by requesting installer/overview.php?showmask= traversal to Config/constants.php and matching DB markers. !/usr/bin/env python3 -- coding: utf-8 -- """eduTrac installer overview.php path traversal CVE-2013-7097.""" from kittysploit import from lib.protocols.http.httpclient...

Path Traversal in eduTrac

Advisory ID: HTB23190 Product: eduTrac Vendor: 7 Media Web Solutions, LLC. Vulnerable Versions: 1.1.1-Stable and probably prior Tested Version: 1.1.1-Stable Advisory Publication: December 11, 2013 without technical details Vendor Notification: December 11, 2013 Vendor Patch: December 16, 2013...

Directory traversal

Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the showmask parameter to installer/overview.php...

CVE-2013-7097

The CVE-2013-7097 issue affects eduTrac (7 Media Web Solutions) up to version 1.1.1-Stable (likely earlier) where the showmask parameter is not properly filtered in /installer/overview.php, allowing a remote attacker to traverse directories and read arbitrary files via ../../ style paths used in ...

EUVD-2013-6883

Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the showmask parameter to installer/overview.php...

CVE-2013-7097: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the showmask parameter to installer/overview.php...

PT-2014-3262

Name of the Vulnerable Software and Affected Versions 7 Media Web Solutions eduTrac versions prior to 1.1.2 Description A directory traversal issue allows remote attackers to read arbitrary files by using a .. dot dot in the showmask parameter to the "installer/overview.php" endpoint...

eduTrac 1.1.1-Stable Path Traversal Vulnerability

Exploit for php platform in category web applications Product: eduTrac Vendor: 7 Media Web Solutions, LLC. Vulnerable Versions: 1.1.1-Stable and probably prior Tested Version: 1.1.1-Stable Advisory Publication: December 11, 2013 without technical details Vendor Notification: December 11, 2013...

eduTrac 1.1.1-Stable Path Traversal

Advisory ID: HTB23190 Product: eduTrac Vendor: 7 Media Web Solutions, LLC. Vulnerable Versions: 1.1.1-Stable and probably prior Tested Version: 1.1.1-Stable Advisory Publication: December 11, 2013 without technical details Vendor Notification: December 11, 2013 Vendor Patch: December 16, 2013...

eduTrac目录遍历漏洞

Bugtraq ID:64255 eduTrac是一个开源的学生管理信息系统。 eduTrac存在一个未明目录遍历漏洞，允许远程攻击者利用漏洞提交特殊请求，查看系统文件内容。 0 eduTrac 1.1.1-Stable eduTrac 1.1.2版本以修复此漏洞，建议用户下载使用： http://sourceforge.net/projects/edutrac/...

eduTrac - showmask Directory Traversal

eduTrac - showmask Directory Traversal source: https://www.securityfocus.com/bid/64255/info eduTrac is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. A remote attacker could exploit the vulnerability using directory-traversal characters '.....

Path Traversal in eduTrac

High-Tech Bridge Security Research Lab discovered path traversal vulnerability in eduTrac which can be exploited to read arbitrary files on vulnerable system with privileges of web server. 1 Path Traversal in eduTrac: CVE-2013-7097 The vulnerability exists due to insufficient filtration of...

eduTrac - 'showmask' Directory Traversal

source: https://www.securityfocus.com/bid/64255/info eduTrac is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. A remote attacker could exploit the vulnerability using directory-traversal characters '../' to access arbitrary files that conta...