Tod Beardsley 873bdbab57 Removing APSB13-03, not ready. ...

This was landed by @todb-r7 on #1709 but that was premature. #1717 was
a proposed set of fixes, but it didn't go far enough.

@jhart-r7 and @jvazquez-r7 should revisit this module for sure, there's
some good stuff in there, but it's not ready for a real release quite
yet. Take a look at the issues discussed in those PRs and open a new PR
with a new module?

Sorry for the switcheroo, not trying to be a jerk.

[Closes #1717]

2013-04-15 13:36:47 -05:00

..

activecollab_chat.rb

Add normalize_uri to modules that may have

2012-11-08 17:42:48 +01:00

ajaxplorer_checkinstall_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

apprain_upload_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

auxilium_upload_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

axis2_deployer.rb

last of revert-merge snaffu

2013-02-19 23:16:46 -06:00

cuteflow_upload_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

eaton_nsm_code_exec.rb

Use PhpEXE to be able to support PHP and Linux native payloads

2012-11-28 15:06:39 -06:00

extplorer_upload_exec.rb

regex to check version fixed

2013-01-09 23:48:55 +01:00

familycms_less_exec.rb

Add normalize_uri to modules that may have

2012-11-08 17:42:48 +01:00

freenas_exec_raw.rb

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

gitorious_graph.rb

Add normalize_uri to modules that may have

2012-11-08 17:42:48 +01:00

glassfish_deployer.rb

Merges and resolves CJR's normalize_uri fixes

2013-01-07 11:16:58 -06:00

glossword_upload_exec.rb

Uses normalize_uri instead of manually adding a slash

2013-02-25 12:20:37 -06:00

horde_href_backdoor.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

hp_sitescope_uploadfileshandler.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

jboss_bshdeployer.rb

last of revert-merge snaffu

2013-02-19 23:16:46 -06:00

jboss_deploymentfilerepository.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

jboss_invoke_deploy.rb

Fix file header comment

2013-03-07 17:53:19 -06:00

jboss_maindeployer.rb

Merge branch 'master' into feature/http/authv2

2013-02-28 14:33:44 -06:00

jenkins_script_console.rb

Fix file header comment

2013-03-07 17:53:19 -06:00

kordil_edms_upload_exec.rb

Correct bad naming style

2013-02-25 13:29:27 -06:00

lcms_php_exec.rb

Add normalize_uri to modules that may have

2012-11-08 17:42:48 +01:00

log1cms_ajax_create_folder.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

manageengine_search_sqli.rb

Add support for shell sessions in FileDropper

2012-11-16 15:51:54 -06:00

mobilecartly_upload_exec.rb

This is a string, not a variable

2013-01-31 01:56:05 -06:00

movabletype_upgrade_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

mutiny_subnetmask_exec.rb

change print location

2013-03-07 19:15:40 +01:00

netwin_surgeftp_exec.rb

Fix up basic auth madness

2013-03-01 11:59:02 -06:00

op5_license.rb

Add normalize_uri to modules that may have

2012-11-08 17:42:48 +01:00

op5_welcome.rb

Add normalize_uri to modules that may have

2012-11-08 17:42:48 +01:00

openfire_auth_bypass.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

php_cgi_arg_injection.rb

Fix errant use of .to_s instead of .path

2013-01-31 14:18:42 -06:00

php_volunteer_upload_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

phpldapadmin_query_engine.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

phpmyadmin_3522_backdoor.rb

msftidy: Remove $Revision$

2013-01-04 00:48:10 +01:00

phpscheduleit_start_date.rb

Merges and resolves CJR's normalize_uri fixes

2013-01-07 11:16:58 -06:00

phptax_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

plone_popen2.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

pmwiki_pagelist.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

polarcms_upload_exec.rb

Fix polarcms_upload_exec exploit

2013-02-25 22:58:26 -08:00

qdpm_upload_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

rails_json_yaml_code_exec.rb

Updates HTTP_METHOD option to use OptEnum.

2013-02-04 15:32:36 -06:00

rails_xml_yaml_code_exec.rb

Updates HTTP_METHOD option to use OptEnum.

2013-02-04 15:32:36 -06:00

sflog_upload_exec.rb

Add normalize_uri to modules that may have

2012-11-08 17:42:48 +01:00

sit_file_upload.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

snortreport_exec.rb

Merges and resolves CJR's normalize_uri fixes

2013-01-07 11:16:58 -06:00

sonicwall_gms_upload.rb

Use the install path to tell us the separator

2013-02-08 12:10:42 -06:00

splunk_mappy_exec.rb

The 'Set-Cookie' header should be checked before accessing it

2012-11-26 12:06:43 -06:00

splunk_upload_app_exec.rb

Lower ranking because they cannot auto-target

2013-01-23 23:35:31 -06:00

spree_search_exec.rb

Merges and resolves CJR's normalize_uri fixes

2013-01-07 11:16:58 -06:00

spree_searchlogic_exec.rb

Merges and resolves CJR's normalize_uri fixes

2013-01-07 11:16:58 -06:00

struts_code_exec_exception_delegator.rb

Change default target

2013-01-23 23:40:47 -06:00

struts_code_exec_parameters.rb

cleanup for struts_code_exec_parameters

2013-03-21 22:17:47 +01:00

struts_code_exec.rb

Lower ranking because they cannot auto-target

2013-01-23 23:35:31 -06:00

stunshell_eval.rb

Space at EOL (msftidy)

2013-04-03 09:20:01 -05:00

stunshell_exec.rb

cleanup for stunshell_exec

2013-03-28 14:45:51 +01:00

sun_jsws_dav_options.rb

Merges and resolves CJR's normalize_uri fixes

2013-01-07 11:16:58 -06:00

testlink_upload_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

tomcat_mgr_deploy.rb

last of revert-merge snaffu

2013-02-19 23:16:46 -06:00

traq_plugin_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

v0pcr3w_exec.rb

delete comma

2013-03-27 21:33:58 +01:00

vbseo_proc_deutf.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

webpagetest_upload_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

wikka_spam_exec.rb

Correctly use normalize_uri()

2013-01-30 23:23:41 -06:00

zenworks_control_center_upload.rb

fix Privileged field

2013-03-30 19:39:01 +01:00