Krayin CMS - Installer Detection

Krayin CRM installer page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Krayin CRM installer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Krayin CMS - Installer Detection',...

Fork CMS - Installer Detection

Fork CMS installer page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Fork CMS installer page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Fork CMS - Installer Detection', 'description':...

3CX Phone System - Installer Page Exposure Detection

A 3CX Phone System installer or setup wizard page is publicly accessible. This web-based configuration tool is used for initial PBX setup including admin credential creation, SIP trunk configuration, license activation, and network settings. Exposure of this page allows unauthenticated attackers ...

Forgejo Installation Page - Exposure Detection

Checks for the presence of a Forgejo Installer Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Forgejo Installer Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Forgejo...

Metabase Installer - Exposure Detection

Detected Metabase installer page, allowing unauthorized database setup and configuration. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Metabase installer page, allowing unauthorized database setup and configuration.""" from kittysploit import from lib.protocols.http.httpclient import...

Joomla! Installer Exposure Detection

Joomla is susceptible to the Installation page exposure due to misconfiguration. !/usr/bin/env python3 -- coding: utf-8 -- """Joomla is susceptible to the Installation page exposure due to misconfiguration.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Concrete5 - Installer Page Exposure Detection

Detects exposed Concrete5 Installation page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed Concrete5 Installation page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Concrete5 - Installer Page Exposu...

OctoPrint Installation Page - Exposure Detection

Checks for the presence of a OctoPrint Installer Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a OctoPrint Installer Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OctoPrint...

Emby Installation Page - Exposure Detection

Checks for the presence of a Emby Installer Page. !/usr/bin/env python3 -- coding: utf-8 -- """Checks for the presence of a Emby Installer Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Emby Installation Page ...

Path Traversal

OpenCart is vulnerable to Path Traversal. The vulnerability is due to insufficient validation of file paths in the installer.php component of the Extension Installer Page, where crafted input can traverse directories and an attacker can exploit it remotely...

EUVD-2026-18216

A vulnerability was determined in OpenCart 4.1.0.3. This affects an unknown part of the file installer.php of the component Extension Installer Page. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2026-5331

A vulnerability was determined in OpenCart 4.1.0.3. This affects an unknown part of the file installer.php of the component Extension Installer Page. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2026-5331

A vulnerability was determined in OpenCart 4.1.0.3. This affects an unknown part of the file installer.php of the component Extension Installer Page. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2026-5331: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in OpenCart 4.1.0.3. This affects an unknown part of the file installer.php of the component Extension Installer Page. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

PT-2026-29734

A vulnerability was determined in OpenCart 4.1.0.3. This affects an unknown part of the file installer.php of the component Extension Installer Page. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be...

CVE-2026-30237 Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php)

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.155, 25.0.88, and 26.0.10, there is a reflected XSS vulnerability in the GroupOffice installer, endpoint install/license.php. The POST field license is rendered without escaping inside a ,...