Update description

2012-10-23 12:47:46 -05:00 · 2012-10-23 12:47:46 -05:00 · bef4539915
parent 3ff888a5c0
commit bef4539915
1 changed files with 2 additions and 1 deletions
--- a/modules/exploits/multi/http/manageengine_search_sqli.rb
+++ b/modules/exploits/multi/http/manageengine_search_sqli.rb
@ -19,7 +19,8 @@ class Metasploit3 < Msf::Exploit::Remote
 			'Description'    => %q{
 					This module exploits a SQL injection found in ManageEngine Security Manager Plus
 				advanced search page, which results in remote code execution under the context of
-				SYSTEM.  Authentication is not required in order to exploit this vulnerability.
+				SYSTEM in Windows; or as the user in Linux.  Authentication is not required in order
+				to exploit this vulnerability.
 			},
 			'License'        => MSF_LICENSE,
 			'Author'         =>