eScan Web Management Console - Command Injection (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "eScan Web Management Console Command Injection", 'Description' = %q This module exploits a command injection vulnerability found in t...

eScan Web Management Console Command Injection Exploit

This Metasploit module exploits a command injection vulnerability found in the eScan Web Management Console. The vulnerability exists while processing CheckPass login requests. An attacker with a valid username can use a malformed password to execute arbitrary commands. With mwconf privileges, th...

eScan Web Management Console Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "eScan Web Management Console Command Injection", 'Description' = %q This module exploits a command injection vulnerability found in t...

eScan Web Management Console Command Injection

This module exploits a command injection vulnerability found in the eScan Web Management Console. The vulnerability exists while processing CheckPass login requests. An attacker with a valid username can use a malformed password to execute arbitrary commands. With mwconf privileges, the runasroot...

eScan MWAdmin Interface Detection

MWAdmin, a web interface included with multiple Linux-based eScan products, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45344; scriptversion"1.9"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"eScan MWAdmin Interface...

eScan MWAdmin forgotpassword.php uname Parameter Arbitrary Command Execution

The version of MicroWorld eScan MWAdmin hosted on the remote web server fails to properly sanitize input to the 'uname' parameter of the 'forgotpassword.php' script before using it when calling 'exec'. A remote attacker could exploit this to execute arbitrary commands on the system. These command...

eScan Anti-Virus Detection

Binary data 5363.prm...

MicroWorld eScan Antivirus Remote Root Command Execution

!/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] """ MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php and commonfunctions.php in 1 $runasroot =...

MicroWorld eScan Antivirus < 3.x Remote Root Command Execution

Exploit for unknown platform in category remote exploits ============================================================== MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php and commonfunctions.php in 1 $runasroot ...

Microworld eScan AntiVirus < 3.x - Remote Code Execution

!/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] """ MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php and commonfunctions.php in 1 $runasroot =...

Microworld eScan AntiVirus 3.x - Remote Code Execution

Microworld eScan AntiVirus 3.x - Remote Code Execution !/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] """ MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php a...

microworld-traverse.txt

Luigi Auriemma Application: MicroWorld eScan Server aka eScan Management Console http://www.mwti.net Versions: From vendor's website: "The Powerful Management Console of eScan provides options for system administrators to remotely administer a vast network of clients. It also allows them to...

Path traversal

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console aka eScan Server 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR get command...

CVE-2008-1221

CVE-2008-1221 describes an absolute path traversal in the FTP server of MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (eScan Server) 9.0.742.1. The vulnerability allows a remote attacker to read arbitrary files via an absolute pathname in the RETR (get) command. Affec...

MicroWorld eScan Server directory traversal

Embedded TCP/2021 FTP server directory traversal...

Directory traversal in MicroWorld eScan Server 9.0.742.98

Luigi Auriemma Application: MicroWorld eScan Server aka eScan Management Console http://www.mwti.net Versions: = 9.0.742.98 Platforms: Windows Bug: directory traversal Exploitation: remote Date: 06 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3...

MicroWorld eScan Server目录遍历漏洞

BUGTRAQ ID: 28127 eScan是一款全面的杀毒、内容过滤解决方案。 eScan在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问系统文件。 eScan Server（eserv.exe）在2021端口监听FTP连接。如果远程攻击者向该服务提交的FTP请求中在所选定磁盘的根路径文件名包含有斜线或反斜线的话（如/boot.ini或\windows\win.ini），就可以下载远程系统磁盘上的任意文件。 MicroWorld Technologies eScan Corporate Edition 9.0.742.98 MicroWorld...

eScan Server Management Console (eserv.exe) FTP Server Arbitrary File Download

The version of eScan Management Console / eScan Server installed on the remote host includes an FTP server that is affected by a directory traversal vulnerability. By leveraging this issue, an unauthenticated, remote attacker can retrieve files on the same drive as the application. C Tenable...