Adding description of the module

2016-10-10 06:22:11 +00:00 · 2016-10-10 06:22:11 +00:00 · da307a5312
parent 467f9e700d
commit da307a5312
1 changed files with 4 additions and 1 deletions
--- a/modules/exploits/windows/http/ektron_xslt_exec_ws.rb
+++ b/modules/exploits/windows/http/ektron_xslt_exec_ws.rb
@ -14,7 +14,10 @@ class MetasploitModule < Msf::Exploit::Remote
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'Ektron 8.5, 8.7, 9.0 XSLT Transform Remote Code Execution',
-      'Description'    => %q{
+      'Description'    => %q{ Ektron 8.5, 8.7 <= sp1, 9.0 < sp1 have
+vulnerabilities in various operations within the ServerControlWS.asmx
+web services. These vulnerabilities allow for RCE without authentication and
+execute in the context of IIS on the remote system.
      },
      'Author'         => [
        'catatonicprime'