Arkeia Appliance - lang Cookie LFI Detection (CVE-2014-2846)

Detects CVE-2014-2846 by POSTing to /login/doLogin with Cookie lang=aaa..././..././etc/passwd%00. !/usr/bin/env python3 -- coding: utf-8 -- """Arkeia Appliance lang cookie path traversal CVE-2014-2846.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PT-2014-4914

Name of the Vulnerable Software and Affected Versions WD Arkeia virtual appliance AVA versions prior to 10.2.9 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files and execute arbitrary PHP code. This is achieved by manipulating the lang Cookie paramet...