D-Link DIR - __show_info.php File Read (CVE-2017-12943)

Reads arbitrary files via REQUIREFILE on /model/showinfo.php CVE-2017-12943. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR showinfo.php file read CVE-2017-12943.""" from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

D-Link DIR - __show_info.php File Disclosure Detection (CVE-2017-12943)

Detects CVE-2017-12943 by requesting /model/showinfo.php?REQUIREFILE=/var/etc/httpasswd. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR showinfo.php file disclosure CVE-2017-12943.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2017-12943: Improper Limitation of a Pathname to a Restricted Directory

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/showinfo.php?REQUIREFILE= absolute path traversal attack, as demonstrated by discovering the admin password...