EDB-5499
functionalSiteman 2.x - Code Execution / Local File Inclusion / Cross-Site Scripting
view exploit source exploit_dbverifiedtype webappsauthor Khashayar Fereidanipublished 2008-04-26catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-2081US | high9.0 | Exploit | ||
Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the m… | ||||
| CVE-2008-2082US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web script or HTML via the module parameter, which leaks the pat… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan