Mike Cyr

An issue was discovered in dnaLIMS, allowing an unauthenticated attacker to access system files readable by the web server user through a NUL-terminated directory traversal attack. This is achieved by exploiting the `seqID` parameter in the "viewAppletFsa.cgi" endpoint.

An issue was discovered in dnaLIMS where it stores passwords in plaintext. The passwords are stored in the /home/dna/spool/.pfile file.

An issue was discovered in dnaLIMS, where it is vulnerable to session hijacking by guessing the `UID` parameter.

The issue concerns an improperly protected administrative web shell, allowing unauthenticated command execution. This can be exploited through `cgi-bin/dna/sysAdmin.cgi` using specially crafted POST requests, enabling a remote attacker to execute arbitrary commands. The vulnerability is related to the lack of input data sanitization measures in the administrative web shell of the dnaLIMS software.