Phpunity Newsmanager - tell.php LFI Detection (CVE-2010-0799)

Detects CVE-2010-0799 via misc/tellafriend/tell.php?id=../../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2010-0799 via misc/tellafriend/tell.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

CVE-2014-8307

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

CVE-2010-0799: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in misc/tellafriend/tell.php in phpunity.newsmanager allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

PHPUnity.NewsManager Local File Inclusion

phpunity.newsmanager - Local file inclusion id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 28 januari, 2010 Software Information + Vendor : http://www.perlunity.de/ + Download : http://www.perlunity.de/php/scripts/phpunity.newsmanager.shtml + version : - +...