Bulbsecurity

Smartphone Pentest Framework

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2012-5878

Exploit
  • EPSS 10.61%
  • Veröffentlicht 03.01.2020 20:15:11
  • Zuletzt bearbeitet 21.11.2024 01:45:25

Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLP...

8.8

CVE-2012-5693

Exploit
  • EPSS 0.89%
  • Veröffentlicht 03.01.2020 20:15:10
  • Zuletzt bearbeitet 21.11.2024 01:45:08

Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2) guessPassword.pl in frameworkgui/; the filename pa...

4.6

CVE-2012-5697

Exploit
  • EPSS 0.04%
  • Veröffentlicht 20.10.2014 16:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which allows local users to obtain sensitive information or inject arbitrary ...

6.8

CVE-2012-5694

Exploit
  • EPSS 0.44%
  • Veröffentlicht 20.10.2014 16:55:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbitrary SQL commands via the (1) agentPhNo, (2) controlPhNo, (3) agentURLPath, (4) agentControlKey, or (5) pla...

6.8

CVE-2012-5695

Exploit
  • EPSS 0.46%
  • Veröffentlicht 20.10.2014 16:55:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct (1) shell metacharacter...

5

CVE-2012-5696

Exploit
  • EPSS 0.25%
  • Veröffentlicht 20.10.2014 16:55:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request.