Merge branch 'master' of https://github.com/rapid7/metasploit-framework
commit
fd397db6e0
|
@ -29,7 +29,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
'License' => MSF_LICENSE,
|
||||
'References' =>
|
||||
[
|
||||
['EDB', '23522']
|
||||
[ 'OSVDB', '89105' ],
|
||||
[ 'EDB', '23522' ]
|
||||
],
|
||||
'Targets' =>
|
||||
[
|
||||
|
@ -123,4 +124,4 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
|
||||
handler
|
||||
end
|
||||
end
|
||||
end
|
||||
|
|
|
@ -17,9 +17,9 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
|
||||
def initialize(info = {})
|
||||
super(update_info(info,
|
||||
'Name' => 'PolarPearCms PHP File Upload Vulnerability',
|
||||
'Name' => 'PolarBear CMS PHP File Upload Vulnerability',
|
||||
'Description' => %q{
|
||||
This module exploits a file upload vulnerability found in PlarPear CMS
|
||||
This module exploits a file upload vulnerability found in PolarBear CMS
|
||||
By abusing the upload.php file, a malicious user can upload a file to a temp
|
||||
directory without authentication, which results in arbitrary code execution.
|
||||
},
|
||||
|
@ -30,7 +30,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
'License' => MSF_LICENSE,
|
||||
'References' =>
|
||||
[
|
||||
[ 'CVE', '2013-0803' ]
|
||||
[ 'CVE', '2013-0803' ],
|
||||
[ 'OSVDB', '90627' ]
|
||||
],
|
||||
'Payload' =>
|
||||
{
|
||||
|
|
|
@ -41,7 +41,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
'License' => MSF_LICENSE,
|
||||
'References' =>
|
||||
[
|
||||
['CVE', '2013-0333'],
|
||||
[ 'CVE', '2013-0333' ],
|
||||
[ 'OSVDB', '89594' ]
|
||||
],
|
||||
'Platform' => 'ruby',
|
||||
'Arch' => ARCH_RUBY,
|
||||
|
|
|
@ -27,8 +27,9 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
],
|
||||
'References' =>
|
||||
[
|
||||
['URL', 'https://defense.ballastsecurity.net/wiki/index.php/V0pCr3w_shell'],
|
||||
['URL', 'https://defense.ballastsecurity.net/decoding/index.php?hash=f6b534edf37c3cc0aa88997810daf9c0']
|
||||
[ 'OSVDB', '91841'],
|
||||
[ 'URL', 'https://defense.ballastsecurity.net/wiki/index.php/V0pCr3w_shell' ],
|
||||
[ 'URL', 'https://defense.ballastsecurity.net/decoding/index.php?hash=f6b534edf37c3cc0aa88997810daf9c0' ]
|
||||
],
|
||||
'Privileged' => false,
|
||||
'Payload' =>
|
||||
|
|
Loading…
Reference in New Issue