diff --git a/modules/auxiliary/admin/http/webnms_cred_disclosure.rb b/modules/auxiliary/admin/http/webnms_cred_disclosure.rb
index ba458f6f33..35dda0c772 100644
--- a/modules/auxiliary/admin/http/webnms_cred_disclosure.rb
+++ b/modules/auxiliary/admin/http/webnms_cred_disclosure.rb
@@ -30,7 +30,10 @@ Windows and Linux.
         'License' => MSF_LICENSE,
         'References' =>
           [
-            [ 'URL', 'https://blogs.securiteam.com/index.php/archives/2712' ]
+            [ 'CVE', '2016-6601'],
+            [ 'CVE', '2016-6602'],
+            [ 'URL', 'https://blogs.securiteam.com/index.php/archives/2712' ],
+            [ 'URL', 'http://seclists.org/fulldisclosure/2016/Aug/54' ]
           ],
         'DisclosureDate' => 'Jul 4 2016'
       )
diff --git a/modules/auxiliary/admin/http/webnms_file_download.rb b/modules/auxiliary/admin/http/webnms_file_download.rb
index 2534d3ceb2..6abfb57f42 100644
--- a/modules/auxiliary/admin/http/webnms_file_download.rb
+++ b/modules/auxiliary/admin/http/webnms_file_download.rb
@@ -31,7 +31,9 @@ Windows and Linux.
         'License' => MSF_LICENSE,
         'References' =>
           [
-            [ 'URL', 'https://blogs.securiteam.com/index.php/archives/2712' ]
+            [ 'CVE', '2016-6601'],
+            [ 'URL', 'https://blogs.securiteam.com/index.php/archives/2712' ],
+            [ 'URL', 'http://seclists.org/fulldisclosure/2016/Aug/54' ]
           ],
         'DisclosureDate' => 'Jul 4 2016'
       )
diff --git a/modules/exploits/multi/http/webnms_file_upload.rb b/modules/exploits/multi/http/webnms_file_upload.rb
index 25c03224eb..250f8053eb 100644
--- a/modules/exploits/multi/http/webnms_file_upload.rb
+++ b/modules/exploits/multi/http/webnms_file_upload.rb
@@ -33,7 +33,9 @@ Windows and Linux.
         'License'      => MSF_LICENSE,
         'References'   =>
           [
-            [ 'URL', 'https://blogs.securiteam.com/index.php/archives/2712' ]
+            [ 'CVE', '2016-6600'],
+            [ 'URL', 'https://blogs.securiteam.com/index.php/archives/2712' ],
+            [ 'URL', 'http://seclists.org/fulldisclosure/2016/Aug/54' ]
           ],
         'DefaultOptions' => { 'WfsDelay' => 15 },
         'Privileged'   => false,