CVE-2017-6526

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

57.40%

Published

Mar 9, 2017

Modified

May 12, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBdnaLIMS DNA Sequencing - Directory Traversal / Session Hijacking / Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi POST requests).

Weaknesses (CWE)

CWE-287

Affected Products (1)

dnatools · dnalimsvulnerable

References (6)

http://www.securityfocus.com/bid/96823

https://www.exploit-db.com/exploits/41578/

https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/

ExploitTechnical DescriptionThird Party Advisory

http://www.securityfocus.com/bid/96823

https://www.exploit-db.com/exploits/41578/

https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/

ExploitTechnical DescriptionThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs