Cartadis Gespage 8.2.1 - Directory Traversal Detection

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. !/usr/bin/env python3 -- coding: utf-8 -- """Cartadis Gespage through 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

CVE-2021-33807: Improper Limitation of a Pathname to a Restricted Directory

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

PT-2021-20329

Name of the Vulnerable Software and Affected Versions: Cartadis Gespage versions 8.2.1 and earlier Description: The issue allows Directory Traversal in the "gespage/doDownloadData" and "gespage/webapp/doDownloadData" API endpoints. Recommendations: For Cartadis Gespage versions 8.2.1 and earlier,...