Commit Graph

3 Commits

Author SHA1 Message Date
mr_me f8977ed72c added some fixes 2017-12-11 11:34:17 -06:00
mr_me 073ffcb3bc added some docs 2017-12-07 16:58:14 -06:00
wchen-r7 3b5db26ff5 Fix #6872, change upload action for CVE-2016-0854 exploit
This patch includes the following changes:

* Instead of the uploadFile action, this patch uses uploadImageCommon
  to be able to support both Advantech WebAccess builds: 2014 and
  2015.
* It uses an explicit check instead of the passive version check.
* It cleans up the malicious file after getting a session.
* Added module documentation to explain the differences between
  different builds of Advantech WebAccess 8.0s, and 8.1.

Fix #6872
2016-05-13 19:47:18 -05:00