what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Bruno Teixeira

Hastymail 2.1.1 RC1 Command Injection

Posted Jul 13, 2012

Authored by juan vazquez, Bruno Teixeira | Site metasploit.com

This Metasploit module exploits a command injection vulnerability found in Hastymail 2.1.1 RC1 due to the insecure usage of the call_user_func_array() function on the "lib/ajax_functions.php" script. Authentication is required on Hastymail in order to exploit the vulnerability. The module has been successfully tested on Hastymail 2.1.1 RC1 over Ubuntu 10.04.

tags | exploit, php

systems | linux, ubuntu

advisories | CVE-2011-4542, OSVDB-77331

SHA-256 | fbe0eb9dcf16cdfa75230cc4026bda4f995b4a74618b8b0e9dd91eba2de87e03

Download | Favorite | View