CVE-2016-9349

Related Files

Advantech SUSIAccess 3.0 File Upload

Posted Aug 2, 2017

Authored by James Fitts

Advantech SUSIAccess versions 3.0 and below suffers from a RecoveryMgmt file upload vulnerability.

tags | exploit, file upload

advisories | CVE-2016-9349, CVE-2016-9351

SHA-256 | 7afddd81c9bc2a2655ff371abde673b9ce3d5c9f80dd813d96f9a3659935c76d

Download | Favorite | View

Advantech SUSIAccess 3.0 Directory Traversal / Information Disclosure

Posted Aug 1, 2017

Authored by James Fitts | Site metasploit.com

This Metasploit module exploits an information disclosure vulnerability found in Advantech SUSIAccess versions 3.0 and below. The vulnerability is triggered when sending a GET request to the server with a series of dot dot slashes (../) in the file parameter.

tags | exploit, file inclusion, info disclosure

advisories | CVE-2016-9349

SHA-256 | 987feed6e20b7d8688f866350e62c7ccd8559ac0d7a669fdd86a82be99cf233c

Download | Favorite | View