updated version info and disclosure date for opera_historysearch
git-svn-id: file:///home/svn/framework3/trunk@6788 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
c7515f15d7
commit
d84c87fa36
|
@ -24,7 +24,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
Certain constructs are not escaped correctly by Opera's History
|
||||
Search results. These can be used to inject scripts into the
|
||||
page, which can then be used to modify configuration settings
|
||||
and execute arbitrary commands.
|
||||
and execute arbitrary commands. Affects Opera versions between
|
||||
9.50 and 9.61.
|
||||
},
|
||||
'License' => BSD_LICENSE,
|
||||
'Author' =>
|
||||
|
@ -51,20 +52,21 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
'Targets' =>
|
||||
[
|
||||
#[ 'Automatic', { } ],
|
||||
#[ 'Opera < 9.60 Windows',
|
||||
#[ 'Opera < 9.61 Windows',
|
||||
# {
|
||||
# 'Platform' => 'win',
|
||||
# 'Arch' => ARCH_X86,
|
||||
# }
|
||||
#],
|
||||
[ 'Opera < 9.60 Unix Cmd',
|
||||
[ 'Opera < 9.61 Unix Cmd',
|
||||
{
|
||||
'Platform' => 'unix',
|
||||
'Arch' => ARCH_CMD,
|
||||
}
|
||||
],
|
||||
],
|
||||
'DisclosureDate' => ''
|
||||
'DisclosureDate' => 'Oct 23 2008', # Date of full-disclosure post showing code exec
|
||||
'DefaultTarget' => 0
|
||||
))
|
||||
end
|
||||
|
||||
|
|
Loading…
Reference in New Issue