Add CVE/URL references to module manage_engine_opmanager_rce

2015-10-16 10:36:13 +07:00 · 2015-10-16 10:36:13 +07:00 · b1f2e40b98
parent dcf7b5c95a
commit b1f2e40b98
1 changed files with 4 additions and 0 deletions
--- a/modules/exploits/windows/http/manage_engine_opmanager_rce.rb
+++ b/modules/exploits/windows/http/manage_engine_opmanager_rce.rb
@ -31,6 +31,10 @@ class Metasploit3 < Msf::Exploit::Remote
      'References'     =>
        [
          [ 'EDB', '38174' ],
+          [ 'CVE', '2015-7765' ], # Hardcoded password
+          [ 'CVE', '2015-7766' ], # SQL query bypass
+          [ 'URL', 'http://seclists.org/fulldisclosure/2015/Sep/66' ],
+          [ 'URL', 'https://support.zoho.com/portal/manageengine/helpcenter/articles/pgsql-submitquery-do-vulnerability' ]
        ],
      'Platform'       => ['java'],
      'Arch'           => ARCH_JAVA,