From bef453991529520303025a1ed10f1a02f65b5cfe Mon Sep 17 00:00:00 2001 From: sinn3r Date: Tue, 23 Oct 2012 12:47:46 -0500 Subject: [PATCH] Update description --- modules/exploits/multi/http/manageengine_search_sqli.rb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modules/exploits/multi/http/manageengine_search_sqli.rb b/modules/exploits/multi/http/manageengine_search_sqli.rb index 2fde8ffac4..71729a7960 100644 --- a/modules/exploits/multi/http/manageengine_search_sqli.rb +++ b/modules/exploits/multi/http/manageengine_search_sqli.rb @@ -19,7 +19,8 @@ class Metasploit3 < Msf::Exploit::Remote 'Description' => %q{ This module exploits a SQL injection found in ManageEngine Security Manager Plus advanced search page, which results in remote code execution under the context of - SYSTEM. Authentication is not required in order to exploit this vulnerability. + SYSTEM in Windows; or as the user in Linux. Authentication is not required in order + to exploit this vulnerability. }, 'License' => MSF_LICENSE, 'Author' =>