CVE-2014-2238 -- MantisBT aux mod
Brandon Perry <[email protected]>
| Newsgroups | gmane.comp.security.full-disclosure |
|---|---|
| Message-ID | <CAOJKFBBd+ox4At2A1KPAGgnrtzERV1PzLUzDXA-n1Rh0fjgWAw@mail.gmail.com> |
Hi, Here is an aux mod that exploits CVE-2014-2238 and reads a file off the FS. Requires admin creds afaict. https://gist.github.com/brandonprry/9330240 -- http://volatile-minds.blogspot.com -- blog http://www.volatileminds.net -- website _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/