diff --git a/modules/exploits/unix/webapp/maarch_letterbox_unrestricted_file_upload.rb b/modules/exploits/unix/webapp/maarch_letterbox_unrestricted_file_upload.rb
index 32a8195e47..f6c7e9558f 100644
--- a/modules/exploits/unix/webapp/maarch_letterbox_unrestricted_file_upload.rb
+++ b/modules/exploits/unix/webapp/maarch_letterbox_unrestricted_file_upload.rb
@@ -26,6 +26,10 @@ class Metasploit3 < Msf::Exploit::Remote
         [
           'Rob Carr <rob[at]rastating.com>'
         ],
+      'References'      =>
+        [
+          ['CVE', '2015-1587']
+        ],
       'DisclosureDate'  => 'Feb 11 2015',
       'Platform'        => 'php',
       'Arch'            => ARCH_PHP,