exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from ruggine

Tomcat UTF-8 Directory Traversal

Posted Aug 31, 2024

Authored by ruggine, aushack | Site metasploit.com

This Metasploit module tests whether a directory traversal vulnerability is present in versions of Apache Tomcat 4.1.0 - 4.1.37, 5.5.0 - 5.5.26 and 6.0.0 - 6.0.16 under specific and non-default installations. The connector must have allowLinking set to true and URIEncoding set to UTF-8. Furthermore, the vulnerability actually occurs within Java and not Tomcat; the server must use Java versions prior to Sun 1.4.2_19, 1.5.0_17, 6u11 - or prior IBM Java 5.0 SR9, 1.4.2 SR13, SE 6 SR4 releases. This Metasploit module has only been tested against RedHat 9 running Tomcat 6.0.16 and Sun JRE 1.5.0-05. You may wish to change FILE (hosts,sensitive files), MAXDIRS and RPORT depending on your environment.

tags | exploit, java

systems | linux, redhat

advisories | CVE-2008-2938

SHA-256 | 074505843e22daa8b105c810b3e9494a29fe2f2609c3910af390ea2827e231d0

Download | Favorite | View

phpnews.txt

Posted Dec 11, 2004

Authored by ruggine

Simple remote exploit for the SQL injection vulnerability discovered in PHPNews.

tags | exploit, remote, sql injection

SHA-256 | c5de8860494ec9c6c1f6fd843c7a558b1fee55f076ab1a36f0363084f66befb4

Download | Favorite | View