typos
parent
f72cce9ff2
commit
438f0e6365
|
@ -16,11 +16,11 @@ class Metasploit4 < Msf::Exploit::Remote
|
|||
'Name' => 'Railo Remote File Include',
|
||||
'Description' => %q{
|
||||
This module exploits a remote file include vulnerability in Railo,
|
||||
tested against version 4.2.1. First, a call using a vulnerablea
|
||||
<cffile> line in thumbnail.cfm allows an atacker to download an
|
||||
arbitrary PNG file. By appending a .cfm, and taking advantage of
|
||||
tested against version 4.2.1. First, a call using a vulnerable
|
||||
<cffile> line in thumbnail.cfm allows an attacker to download an
|
||||
arbitrary PNG file. By appending a .cfm and taking advantage of
|
||||
a directory traversal, an attacker can append cold fusion markup
|
||||
to the PNG file, and have it interpreted by the server. This is
|
||||
to the PNG file and have it interpreted by the server. This is
|
||||
used to stage and execute a fully-fledged payload.
|
||||
},
|
||||
'License' => MSF_LICENSE,
|
||||
|
|
Loading…
Reference in New Issue