Land #6384, more joomla rce references

2015-12-22 22:54:58 +01:00 · 2015-12-22 22:54:58 +01:00 · 424e7b6bfe
parent 84675e352b 18398afb56
commit 424e7b6bfe
1 changed files with 2 additions and 0 deletions
--- a/modules/exploits/multi/http/joomla_http_header_rce.rb
+++ b/modules/exploits/multi/http/joomla_http_header_rce.rb
@ -31,6 +31,8 @@ class Metasploit3 < Msf::Exploit::Remote
      'References'     =>
        [
          ['CVE', '2015-8562'],
+          ['EDB', '38977'], # PoC from Gary
+          ['EDB', '39033'], # Exploit modified to use "X-Forwarded-For" header instead of "User-Agent"
          ['URL', 'https://blog.sucuri.net/2015/12/joomla-remote-code-execution-the-details.html'],
          ['URL', 'https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html'],
          ['URL', 'https://developer.joomla.org/security-centre/630-20151214-core-remote-code-execution-vulnerability.html'],