We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent cfddc73 commit dd1e8ffCopy full SHA for dd1e8ff
documentation/modules/exploit/linux/http/pineapple_bypass_cmdinject.md
@@ -1,9 +1,9 @@
1
## Background
2
3
The 'pineapple_bypass_cmdinject' exploit attacks a weak check for
4
-pre-authorized files (CSS files) which allows the attacker to bypass logging in
5
-at all and then relies on the anti-CSRF vulnerability (CVE-2015-4624) to obtain
6
-command injection.
+pre-authorized CSS files, which allows the attacker to bypass
+authentication. The exploit then relies on the anti-CSRF vulnerability
+(CVE-2015-4624) to obtain command injection.
7
8
This exploit uses a utility function in
9
/components/system/configuration/functions.php to execute commands once
0 commit comments