Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local File Inclusion Detection

Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 is susceptible to local file inclusion in public/examples/resources/getsource.php. This could allow remote attackers to read arbitrary files via the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Luracast Restler 3.""" from kittysploit...

Luracast Restler Directory Traversal Vulnerability

Restler is a support for multiple protocols used to publish PHP classes and methods into a REST API open source framework . A directory traversal vulnerability exists in the public/examples/resources/getsource.php page of Luracast Restler used in the restler extension of TYPO3. A remote tele...

Directory Traversal

luracast/restler are vulnerable to information disclosure attacks. The getsource.php file in the examples allows a malicious user to read any file on the server...

PT-2017-14023

Name of the Vulnerable Software and Affected Versions Luracast Restler versions through 3.0.0 restler extension for TYPO3 versions prior to 1.7.1 Description The issue allows remote attackers to read arbitrary files via the file parameter in the public/examples/resources/getsource.php file...

CVE-2017-15363: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter...