CVE-2010-0904

Related Files

Oracle Secure Backup Authentication Bypass / Command Injection

Posted Aug 31, 2024

Authored by Jay Turla | Site metasploit.com

This Metasploit module exploits an authentication bypass vulnerability in login.php in order to execute arbitrary code via a command injection vulnerability in property_box.php. This Metasploit module was tested against Oracle Secure Backup version 10.3.0.1.0 (Win32).

tags | exploit, arbitrary, php, bypass

systems | windows

advisories | CVE-2010-0904

SHA-256 | 6863a81671e2c9181fc762b376462302051ea799490c07fe8f165bc20e6d3514

Download | Favorite | View

Oracle Secure Backup Authentication Bypass/Command Injection Vulnerability

Posted Aug 21, 2011

Authored by MC | Site metasploit.com

This Metasploit module exploits an authentication bypass vulnerability in login.php. In conjunction with the authentication bypass issue, the 'jlist' parameter in property_box.php can be used to execute arbitrary system commands. This Metasploit module was tested against Oracle Secure Backup version 10.3.0.1.0

tags | exploit, arbitrary, php, bypass

advisories | CVE-2010-0904

SHA-256 | a6b9f81b959d5734b4b0566c794ef98effe3e6416939923022fc0bcd168099f4

Download | Favorite | View