• Apache Module mod_rewrite LDAP Protocol Buffer Overflow
    Disclosure Date: 2006-07-28
    First seen: 2020-04-26
    exploit/windows/http/apache_mod_rewrite_ldap
    This module exploits the mod_rewrite LDAP protocol scheme handling flaw discovered by Mark Dowd, which produces an off-by-one overflow. Apache versions 1.3.29-36, 2.0.47-58, and 2.2.1-2 are vulnerable. This module requires REWRITEPATH to be set accurately. In addition, the target must have 'RewriteEngine on' configured, with a specific 'RewriteRule' condition enabled to allow for exploitation. The flaw affects multiple platforms, however this module currently only supports Windows based installations. Authors: - aushack <patrick@osisecurity.com.au>
  • PHP XML-RPC Arbitrary Code Execution
    Disclosure Date: 2005-06-29
    First seen: 2020-04-26
    exploit/unix/webapp/php_xmlrpc_eval
    This module exploits an arbitrary code execution flaw discovered in many implementations of the PHP XML-RPC module. This flaw is exploitable through a number of PHP web applications, including but not limited to Drupal, Wordpress, Postnuke, and TikiWiki. Authors: - hdm <x@hdm.io> - cazz <bmc@shmoo.com>
2 metasploit modules found
Please note: Metasploit modules are only matched by CVE numbers. Visit metasploit web site for more details
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!