Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory Traversal Detection

Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via 1 "//" multiple leading slash, 2 ../ dot dot sequences, and encoded dot dot sequences in a URL...

Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion Detection

A directory traversal vulnerability in the Realtyna Translator comrealtyna component 1.0.15 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 --...

Joomla! Component Music Manager - Local File Inclusion Detection

A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal...

Camtron CMNC-200 IP Camera - Directory Traversal Detection

The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system. !/usr/bin/env python3 -- coding: utf-8 -- """The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal...

Tiki Wiki CMS Groupware 5.2 - Local File Inclusion Detection

Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Tiki Wiki CMS Groupware 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tiki Wiki CM...

Joomla! Component JRadio - Local File Inclusion Detection

A directory traversal vulnerability in JRadio comjradio component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability i...

Majordomo2 - SMTP/HTTP Directory Traversal Detection

A directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...

WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI) Detection

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal Detection

A directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

GRAND FlAGallery 1.57 - Cross-Site Scripting Detection

A cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting XSS...

Joomla! Component com_kp - 'Controller' Local File Inclusion Detection

A directory traversal vulnerability in the obSuggest comobsuggest component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in the...

Adminimize 1.7.22 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in adminimize/adminimizepage.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

Featurific For WordPress 1.6.2 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in cachedimage.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

11in1 CMS 1.2.1 - Local File Inclusion (LFI) Detection

Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. dot dot in the class parameter to 1 index.php or 2 admin/index.php. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple directory traversal vulnerabilities in...

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities Detection

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the 1 file parameter to document.php or 2 backtopage parameter in a create action to comm/action/fiche.php. !/usr/bin/env...

WP-FaceThumb 0.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in index.""" fro...

FlatnuX CMS - Directory Traversal Detection

A path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. !/usr/bin/env python3 -- coding: utf-8 -- """A path traversal vulnerability in controlcenter.""...

TikiWiki CMS Groupware v8.3 - Open Redirect Detection

tiki-featuredlink.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection !/usr/bin/env python3 -- coding: utf-8 -- """tiki-featuredlink.""" import re from kittysploit import fr...

WordPress Integrator 1.32 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

Telaen => v1.3.1 - Open Redirect Detection

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirection Vulnerability in the redir.""" import re from kittysploit import from...

Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion Detection

A directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. dot dot in the skin parameter. This can be leveraged to execute arbitrary code by obtaining LDAP...

Import Legacy Media <= 0.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

Podcast Channels < 0.28 - Cross-Site Scripting Detection

The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Podcast Channels WordPress plugin was affected by an unauthenticated reflected cross-site scripting securi.""" from...

WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

WP AmASIN – The Amazon Affiliate Shop - Local File Inclusion Detection

Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to read arbitrary files via a full pathname in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Absolute path traversal...

webEdition 6.3.8.0 - Directory Traversal Detection

A directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in showTempFile.""" impo...

Simple Online Planning Tool <1.3.2 - Local File Inclusion Detection

SOPlanning 1.32 contain a directory traversal in the filegetcontents function via a .. dot dot in the fichier parameter. !/usr/bin/env python3 -- coding: utf-8 -- """SOPlanning 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Eleanor CMS - Open Redirect Detection

Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERYSTRING. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in go.""" import re from kittysploit import fro...

Netsweeper 3.0.6 - Open Redirection Detection

An open redirect vulnerability in remotereporter/loadlogfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in...

WordPress Simple Image Manipulator < 1.0 - Local File Inclusion Detection

WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Simple Image...

WordPress Slider Revolution - Local File Disclosure Detection

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734...

WP Attachment Export < 0.2.4 - Unrestricted File Download Detection

The plugin does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress powered site. This includes details of even privately published posts and password protected posts with their passwords revealed ...

Ericsson Drutt MSDP - Local File Inclusion Detection

Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI in the Instance Monitor. !/usr/bin/env python3 -- coding: utf-8 -- """Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, an...

Navis DocumentCloud <0.1.1 - Cross-Site Scripting Detection

Navis DocumentCloud plugin before 0.1.1 for WordPress contains a reflected cross-site scripting vulnerability in js/window.php which allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Navis DocumentCloud plugin...

WordPress Church Admin <0.810 - Cross-Site Scripting Detection

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/churchadmin-registration-form/. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Church Admin plugin before 0.""" from kittysploit...

Koha 3.20.1 - Directory Traversal Detection

Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the templatepath parameter to 1 svc/virtualshelves/search or 2 svc/members/search. !/usr/bin/env python3 -- coding...

WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrieval Detection

WordPress zip-attachments plugin allows arbitrary file retrieval as it does not check the download path of the requested file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress zip-attachments plugin allows arbitrary file retrieval as it does not check the download path of the.""" import re...

Novius OS 5.0.1-elche - Open Redirect Detection

Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. !/usr/bin/env python3 -- coding: utf-8 -- """Novius OS 5.""" import re from kittysploit import from...

Nordex NC2 - Cross-Site Scripting Detection

Nordex NC2 contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks...

Combodo iTop <2.2.0-2459 - Cross-Site Scripting Detection

Combodo iTop before 2.2.0-2459 contains a cross-site scripting vulnerability in application/dashboard.class.inc.php which allows remote attackers to inject arbitrary web script or HTML via a dashboard title. !/usr/bin/env python3 -- coding: utf-8 -- """Combodo iTop before 2.""" from kittysploit...

WordPress RobotCPA 5 - Directory Traversal Detection

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. !/usr/bin/env python3 -- coding: utf-8 -- """The RobotCPA plugin 5 for WordPress has directory traversal via the f.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

Dahua Security - Configuration File Disclosure Detection

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and...

Orange Forum 1.4.0 - Open Redirect Detection

Orange Forum 1.4.0 contains an open redirect vulnerability in views/auth.go via the next parameter to /login or /signup. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 --...

Responsive filemanager 9.13.1 Server-Side Request Forgery Detection

Responsive filemanager 9.13.1 is susceptible to server-side request forgery in upload.php via the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Responsive filemanager 9.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Eventum <3.4.0 - Open Redirect Detection

Eventum before 3.4.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Eventum before 3.""" import re from...

CouchCMS <= 2.0 - Path Disclosure Detection

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. !/usr/bin/env python3 -- coding: utf-8 -- """CouchCMS = 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Etherpad Lite <1.6.4 - Admin Authentication Bypass Detection

Etherpad Lite before 1.6.4 is exploitable for admin access. !/usr/bin/env python3 -- coding: utf-8 -- """Etherpad Lite before 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Etherpad Lite 1.6.4 - Admin...

CERIO-DT Interface - Command Execution Detection

CERIO DT series routers have an operation command injection vulnerability in specific versions. An attacker could exploit this vulnerability to execute commands. !/usr/bin/env python3 -- coding: utf-8 -- """CERIO DT series routers have an operation command injection vulnerability in specific...

DedeCMS 5.8.1-beta - Remote Code Execution Detection

DedeCMS 5.8.1-beta is susceptible to remote code execution via a variable override vulnerability that allows an attacker to construct malicious code with template file inclusion without proper authorization, thus possibly obtaining sensitive information, modifying data, and/or gaining full contro...

Apache Hadoop YARN ResourceManager - Unauthenticated API Detection

Apache Hadoop YARN ResourceManager is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Apache...