Vulnerabilities
GitStack 2.3.10 Unauthenticated Remote Code Execution
$_SERVER['PHP_AUTH_PW'] is directly passed to exec function.
18-01-2018
1 MIN READ
Vulnerabilities
$_SERVER['PHP_AUTH_PW'] is directly passed to exec function.
1 MIN READ
Vulnerabilities
We can access registerExternalLog without any user credentials.
2 MIN READ
Vulnerabilities
$_GET['uploaddir'] is not escaped and passed to system() through $tmp_upload_dir.
1 MIN READ
Vulnerabilities
CVE-2017-11151 allows remote attackers to upload arbitrary files to the specified directories.
1 MIN READ
Vulnerabilities
When uploading a file, the FileUploadServlet class does not check the user-controlled fileName parameter using hasVulnerabilityInFileName function.
3 MIN READ
Vulnerabilities
$_COOKIE[STATIONSID] is not escaped.
1 MIN READ
Vulnerabilities
RunImpersonated() executes given function in the context of currently logged in user.
3 MIN READ
Vulnerabilities
CG6Service service has interesting method SetPeLauncherState which allows launch the debugger automatically for every process we want using Image File Execution Options
1 MIN READ