Merge branch 'master' of https://github.com/rapid7/metasploit-framework
commit
fd397db6e0
|
@ -29,7 +29,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
'License' => MSF_LICENSE,
|
'License' => MSF_LICENSE,
|
||||||
'References' =>
|
'References' =>
|
||||||
[
|
[
|
||||||
['EDB', '23522']
|
[ 'OSVDB', '89105' ],
|
||||||
|
[ 'EDB', '23522' ]
|
||||||
],
|
],
|
||||||
'Targets' =>
|
'Targets' =>
|
||||||
[
|
[
|
||||||
|
|
|
@ -17,9 +17,9 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
|
|
||||||
def initialize(info = {})
|
def initialize(info = {})
|
||||||
super(update_info(info,
|
super(update_info(info,
|
||||||
'Name' => 'PolarPearCms PHP File Upload Vulnerability',
|
'Name' => 'PolarBear CMS PHP File Upload Vulnerability',
|
||||||
'Description' => %q{
|
'Description' => %q{
|
||||||
This module exploits a file upload vulnerability found in PlarPear CMS
|
This module exploits a file upload vulnerability found in PolarBear CMS
|
||||||
By abusing the upload.php file, a malicious user can upload a file to a temp
|
By abusing the upload.php file, a malicious user can upload a file to a temp
|
||||||
directory without authentication, which results in arbitrary code execution.
|
directory without authentication, which results in arbitrary code execution.
|
||||||
},
|
},
|
||||||
|
@ -30,7 +30,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
'License' => MSF_LICENSE,
|
'License' => MSF_LICENSE,
|
||||||
'References' =>
|
'References' =>
|
||||||
[
|
[
|
||||||
[ 'CVE', '2013-0803' ]
|
[ 'CVE', '2013-0803' ],
|
||||||
|
[ 'OSVDB', '90627' ]
|
||||||
],
|
],
|
||||||
'Payload' =>
|
'Payload' =>
|
||||||
{
|
{
|
||||||
|
|
|
@ -41,7 +41,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
'License' => MSF_LICENSE,
|
'License' => MSF_LICENSE,
|
||||||
'References' =>
|
'References' =>
|
||||||
[
|
[
|
||||||
['CVE', '2013-0333'],
|
[ 'CVE', '2013-0333' ],
|
||||||
|
[ 'OSVDB', '89594' ]
|
||||||
],
|
],
|
||||||
'Platform' => 'ruby',
|
'Platform' => 'ruby',
|
||||||
'Arch' => ARCH_RUBY,
|
'Arch' => ARCH_RUBY,
|
||||||
|
|
|
@ -27,8 +27,9 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
],
|
],
|
||||||
'References' =>
|
'References' =>
|
||||||
[
|
[
|
||||||
['URL', 'https://defense.ballastsecurity.net/wiki/index.php/V0pCr3w_shell'],
|
[ 'OSVDB', '91841'],
|
||||||
['URL', 'https://defense.ballastsecurity.net/decoding/index.php?hash=f6b534edf37c3cc0aa88997810daf9c0']
|
[ 'URL', 'https://defense.ballastsecurity.net/wiki/index.php/V0pCr3w_shell' ],
|
||||||
|
[ 'URL', 'https://defense.ballastsecurity.net/decoding/index.php?hash=f6b534edf37c3cc0aa88997810daf9c0' ]
|
||||||
],
|
],
|
||||||
'Privileged' => false,
|
'Privileged' => false,
|
||||||
'Payload' =>
|
'Payload' =>
|
||||||
|
|
Loading…
Reference in New Issue