185 matches found
CVE-2016-4806
Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access web server sensitive files...
CVE-2016-4806
CVE-2016-4806 affects Web2py 2.14.5 and earlier, enabling Local File Inclusion (LFI) that can allow a malicious user to read server-sensitive files. Public references show an exploit for Web2py 2.14.5 and note a fixed version Web2py 2.14.6. Impact described includes access to sensitive files; no ...
CVE-2016-4808
Web2py CSRF vulnerability CVE-2016-4808 affects Web2py 2.14.5 and earlier. The issue lets an attacker lure a logged-in user (often an admin) to perform unintended actions by visiting a malicious URL, potentially disabling an installed application. Public references indicate exploits exist (e.g., ...
CVE-2016-4807
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user admin...
CVE-2016-4807
CVE-2016-4807 affects Web2py 2.14.5 and earlier, introducing a reflected XSS vulnerability that can allow an attacker to perform script execution in the browser of a logged-in admin. The vulnerability is documented across multiple sources (NVD/NVD-linked entries and OSS platforms) as a Web2py Ref...
PT-2017-8533
Name of the Vulnerable Software and Affected Versions Web2py versions 2.14.5 and below Description The issue allows an attacker to perform a Reflected XSS attack on a logged-in user, specifically those with admin privileges. Recommendations For Web2py versions 2.14.5 and below, at the moment, the...
Internet Bug Bounty: CVE-2016-0772 - python: smtplib StartTLS stripping attack
python smtplib starttls stripping attack affects: basically all versions of smtplib with starttls support and projects relying on it python 2.7.2 - 2.7.11 dates back 14 years python 3.0 - 3.5.1 dates back 7 years Python's implementation of smtplib fails to raise an exception upon an unexpected...
Web2py 2.14.5 本地文件包含等多个漏洞
No description provided by source...
web2py cross-site scripting vulnerability (CNVD-2016-03331)
web2py is a set of open source Web framework written in Python , it supports the rapid development of database-driven Web-based applications . A cross-site scripting vulnerability exists in web2py version 2.14.5. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...
web2py local file inclusion vulnerability
web2py is a set of open source Web framework written in Python , it supports the rapid development of database-driven Web-based applications . A local file inclusion vulnerability exists in the 'file' parameter in web2py version 2.14.5. An attacker can exploit this vulnerability by sending a...
web2py Cross-Site Request Forgery Vulnerability
web2py is a set of open source Web framework written in Python , it supports the rapid development of database-driven Web-based applications . A cross-site request forgery vulnerability exists in web2py version 2.14.5. An attacker can exploit this vulnerability to trick a user into enabling or...
Web2py 2.14.5 - Multiple Vulnerabilities
Web2py 2.14.5 - Multiple Vulnerabilities Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati -...
Web2py 2.14.5 - Multiple Vulnerabilities
Exploit for php platform in category web applications Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati -...
Web2py 2.14.5 CSRF / XSS / Local File Inclusion
Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...
Web2py 2.14.5 - Multiple Vulnerabilities
Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...
Kvasir - Penetration Testing Data Management Tool
Penetration Testing Data Management can be a nightmware, because well you generate a LOT of data and some information when conducing a penetration test, especially using tools – they return lots of actual and potential vulnerabilitites to review. Port scanners can return thousands of ports for ju...
[Kvasir] Tools for effective data management during a Penetration Test
Welcome to Kvasir! Herein these directories lay the groundwork tools for effective data management during a Penetration Test. Penetration tests can be data management nightmares because of the large amounts of information that is generally obtained. Vulnerability scanners return lots of actual an...
CVE-2013-2311
Cross-site scripting XSS vulnerability in static/js/share.js aka the social bookmarking widget in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in static/js/share.js aka the social bookmarking widget in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-2311
Cross-site scripting XSS vulnerability in static/js/share.js aka the social bookmarking widget in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...