updated version info and disclosure date for opera_historysearch

git-svn-id: file:///home/svn/framework3/trunk@6788 4d416f70-5f16-0410-b530-b9f4589650da
unstable
James Lee 2009-07-13 23:12:25 +00:00
parent c7515f15d7
commit d84c87fa36
1 changed files with 6 additions and 4 deletions

View File

@ -24,7 +24,8 @@ class Metasploit3 < Msf::Exploit::Remote
Certain constructs are not escaped correctly by Opera's History
Search results. These can be used to inject scripts into the
page, which can then be used to modify configuration settings
and execute arbitrary commands.
and execute arbitrary commands. Affects Opera versions between
9.50 and 9.61.
},
'License' => BSD_LICENSE,
'Author' =>
@ -51,20 +52,21 @@ class Metasploit3 < Msf::Exploit::Remote
'Targets' =>
[
#[ 'Automatic', { } ],
#[ 'Opera < 9.60 Windows',
#[ 'Opera < 9.61 Windows',
# {
# 'Platform' => 'win',
# 'Arch' => ARCH_X86,
# }
#],
[ 'Opera < 9.60 Unix Cmd',
[ 'Opera < 9.61 Unix Cmd',
{
'Platform' => 'unix',
'Arch' => ARCH_CMD,
}
],
],
'DisclosureDate' => ''
'DisclosureDate' => 'Oct 23 2008', # Date of full-disclosure post showing code exec
'DefaultTarget' => 0
))
end