Spreecommerce 0.60.1 Arbitrary Command Execution

Exploit for linux platform in category web applications $Id: spreesearchexec.rb 13831 2011-10-07 17:45:15Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Spreecommerce 0.60.1 Arbitrary Command Execution

This module exploits an arbitrary command execution vulnerability in the Spreecommerce search. Unvalidated input is called via the Ruby send method allowing command execution. Module Options msf use exploit/multi/http/spree/searchexec msf undefinedsearchexec show actions ...actions... msf...

Spreecommerce api/orders.json Search Function Arbitrary Command Execution

The remote web server hosts Spree, an open source e-commerce application for Ruby on Rails. The version of this application installed on the remote host has a flaw in the third-party 'rdsearchlogic' Ruby gem. An unauthenticated, remote attacker can inject arbitrary Ruby code via the...

Spreecommerce Arbitrary Command Execution

$Id: spreesearchlogicexec.rb 12397 2011-04-21 19:38:42Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Spreecommerce < 0.50.0 Arbitrary Command Execution

Exploit for unix platform in category remote exploits $Id: spreesearchlogicexec.rb 12397 2011-04-21 19:38:42Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informatio...

Spreecommerce < 0.50.0 - Arbitrary Command Execution (Metasploit)

$Id: spreesearchlogicexec.rb 12397 2011-04-21 19:38:42Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Spreecommerce Arbitrary Command Execution

This module exploits an arbitrary command execution vulnerability in the Spreecommerce API searchlogic for versions 0.50.0 and earlier. Unvalidated input is called via the Ruby send method allowing command execution. Module Options msf use exploit/multi/http/spree/searchlogicexec msf...