CVE-2014-2238

Related Files

Wordpress Photo Gallery Unauthenticated SQL Injection User Enumeration

Posted Jan 13, 2015

Authored by Brandon Perry | Site metasploit.com

This Metasploit module exploits an unauthenticated SQL injection in order to enumerate the Wordpress users tables, including password hashes. This Metasploit module was tested against version 1.2.7.

tags | exploit, sql injection

advisories | CVE-2014-2238

SHA-256 | b0515350e4ccd496fb0e7266e0caa11158145540d2f845735488187df6eb3bf1

Download | Favorite | View

MantisBT Admin SQL Injection Arbitrary File Read

Posted Mar 3, 2014

Authored by Brandon Perry | Site metasploit.com

MantisBT versions 1.2.16 and below Metasploit module that leverages a remote SQL injection vulnerability to perform an arbitrary file read. Administrative credentials required.

tags | exploit, remote, arbitrary, sql injection

advisories | CVE-2014-2238

SHA-256 | aa47d71bf88217768761036b4fe39e67d36b8a53ac37514259ca02cca0186d98

Download | Favorite | View