File tree Expand file tree Collapse file tree 1 file changed +6
-3
lines changed
modules/exploits/multi/http Expand file tree Collapse file tree 1 file changed +6
-3
lines changed Original file line number Diff line number Diff line change @@ -13,9 +13,10 @@ class Metasploit3 < Msf::Exploit::Remote
13
13
14
14
def initialize ( info = { } )
15
15
super ( update_info ( info ,
16
- 'Name' => 'Phpwiki ploticus Remote Code Execution' ,
16
+ 'Name' => 'Phpwiki Ploticus Remote Code Execution' ,
17
17
'Description' => %q{
18
- The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via command injection.
18
+ The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary
19
+ code via command injection.
19
20
} ,
20
21
'Author' =>
21
22
[
@@ -27,7 +28,9 @@ def initialize(info = {})
27
28
[
28
29
[ 'CVE' , '2014-5519' ] ,
29
30
[ 'OSVDB' , '110576' ] ,
30
- [ 'EDB' , '34451' ]
31
+ [ 'EDB' , '34451' ] ,
32
+ [ 'URL' , 'https://sourceforge.net/p/phpwiki/code/8974/?page=1' ] , # This commit prevents exploitation
33
+ [ 'URL' , 'http://seclists.org/fulldisclosure/2014/Aug/77' ] # The day the vuln went public
31
34
] ,
32
35
'Payload' =>
33
36
{
You can’t perform that action at this time.
0 commit comments