EDB-41578
PoCdnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting
Exploit ansehen Quelle exploit_dbTyp webappsAutor Shorebreak Securityveröffentlicht 2017-03-10Katalog exploit_db
01
ausgenutzte CVEs (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-6529US | high8.8 | Exploit | ||
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter. | ||||
| CVE-2017-6528US | high8.1 | Exploit | ||
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna/spool/.pfile file). | ||||
| CVE-2017-6527US | high7.5 | Exploit | ||
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system fi… | ||||
| CVE-2017-6526US | critical9.8 | Exploit | ||
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan