Accellion FTA - statecode File Read (CVE-2015-2856)

Reads arbitrary files via CVE-2015-2856 statecode cookie LFI on /intermediatelogin.html. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA statecode cookie file disclosure CVE-2015-2856.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Accellion FTA Statecode Cookie Arbitrary File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Accellion FTA 'statecode' Cookie Arbitrary File Read", 'Description' = %q This module exploits a file disclosure vulnerability in the Accellion...

CVE-2015-2856

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA911210 allows remote attackers to read arbitrary files via a .. dot dot in the statecode cookie...

CVE-2015-2856: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA911210 allows remote attackers to read arbitrary files via a .. dot dot in the statecode cookie...

PT-2017-6615

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance devices versions prior to FTA 9 11 210 Description A directory traversal issue exists in the template function in function.inc, allowing remote attackers to read arbitrary files by including a .. dot dot in th...

Accellion Secure File Transfer Appliance 'statecode' Cookie Remote File Disclosure

The remote Accellion Secure File Transfer Appliance is affected by an arbitrary file disclosure vulnerability due to improper sanitization of user-supplied input to the 'statecode' cookie used by the template function in function.inc. A remote, unauthenticated attacker can exploit this...