dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

automatic module_metadata_base.json update

This commit is contained in:
Metasploit 2019-04-02 13:04:27 -07:00
parent bc4857954e
commit ced68536ab
No known key found for this signature in database
GPG Key ID: CDFB5FA52007B954
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
db/modules_metadata_base.json
View File

@ -48150,8 +48150,7 @@
"description": "This module exploits the command injection vulnerability of MailCleaner Community Edition product. An authenticated user can execute an\n operating system command under the context of the web server user which is root.\n\n /admin/managetracing/search/search endpoint takes several user inputs and then pass them to the internal service which is responsible for executing\n operating system command. One of the user input is being passed to the service without proper validation. That cause a command injection vulnerability.",
"references": [
"URL-https://pentest.blog/advisory-mailcleaner-community-edition-remote-code-execution/",
"CVE-2018-20323",
"CVE-2018-1000999"
"CVE-2018-20323"
],
"platform": "Python,Unix",
"arch": "python, cmd",
@ -48175,7 +48174,7 @@
"Python payload",
"Command payload"
],
"mod_time": "2019-01-23 09:27:12 +0000",
"mod_time": "2019-04-02 12:51:09 +0000",
"path": "/modules/exploits/linux/http/mailcleaner_exec.rb",
"is_install_path": true,
"ref_name": "linux/http/mailcleaner_exec",