automatic module_metadata_base.json update
parent
0dea5fcfd9
commit
21f2b5e298
|
@ -29003,6 +29003,36 @@
|
|||
"post_auth": true,
|
||||
"default_credential": true
|
||||
},
|
||||
"auxiliary_sqli/oracle/dolibarr_list_creds": {
|
||||
"name": "Dolibarr List Creds",
|
||||
"full_name": "auxiliary/sqli/oracle/dolibarr_list_creds",
|
||||
"rank": 300,
|
||||
"disclosure_date": "2018-05-30",
|
||||
"type": "auxiliary",
|
||||
"author": [
|
||||
"Issam Rabhi",
|
||||
"Kevin Locati",
|
||||
"Shelby Pace"
|
||||
],
|
||||
"description": "This module enables an authenticated user to collect the usernames and encrypted passwords of other users in the Dolibarr ERP/CRM via SQL injection.",
|
||||
"references": [
|
||||
"CVE-2018-10094",
|
||||
"EDB-44805"
|
||||
],
|
||||
"is_server": false,
|
||||
"is_client": false,
|
||||
"platform": "",
|
||||
"arch": "",
|
||||
"rport": 80,
|
||||
"targets": null,
|
||||
"mod_time": "2018-08-31 08:41:25 +0000",
|
||||
"path": "/modules/auxiliary/sqli/oracle/dolibarr_list_creds.rb",
|
||||
"is_install_path": true,
|
||||
"ref_name": "sqli/oracle/dolibarr_list_creds",
|
||||
"check": false,
|
||||
"post_auth": true,
|
||||
"default_credential": true
|
||||
},
|
||||
"auxiliary_sqli/oracle/droptable_trigger": {
|
||||
"name": "Oracle DB SQL Injection in MDSYS.SDO_TOPO_DROP_FTBL Trigger",
|
||||
"full_name": "auxiliary/sqli/oracle/droptable_trigger",
|
||||
|
|
Loading…
Reference in New Issue