TYPO3 - download.php localconf.php Disclosure Detection

Detects TYPO3 fileadmin/download.php LFI reading typo3conf/localconf.php TYPO3CONFVARS / typodbpassword. !/usr/bin/env python3 -- coding: utf-8 -- """Detects TYPO3 fileadmin/download.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

kayser-werk.de XSS vulnerability

Open Bug Bounty ID: OBB-318198 Description| Value ---|--- Affected Website:| kayser-werk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

molotow.com XSS vulnerability

Vulnerable URL: http://www.molotow.com/typo3conf/ext/slmolotowproducts/iframe.php?h="=x Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 522903 VIP website...