Immunity Canvas: MOINMOIN_RCE

2013-01-0301:55:00

Immunity Canvas

exploitlist.immunityinc.com

0.024 Low

EPSS

Percentile

90.0%

Name	moinmoin_rce
CVE	CVE-2012-6495 Exploit Pack
VENDOR: http://moinmoi.in
NOTES:
This version of the exploit forces a callback by overwriting moin.wsgi. This makes it a one-shot exploit, and if
it fails, will result in the remote MoinMoin install being corrupt. Make sure you set your callback IP address
appropriately. Manually refreshing your browser may open up new listener shells even after the exploit has been run.