CVE-2013-0136

This Metasploit module exploits a directory traversal vulnerability in Mutiny 5's EditDocument servlet to upload arbitrary files, leading to remote code execution with root privileges. It authenticates as a valid user, uploads an ELF payload and a JSP file to execute it, and triggers the payload via HTTP request.

This Metasploit module exploits a directory traversal vulnerability in the Mutiny 5 appliance's EditDocument servlet, allowing authenticated users to read or delete arbitrary files with root privileges. It includes authentication handling and file operations via crafted POST requests.

This Metasploit module exploits a directory traversal vulnerability in Mutiny 5's EditDocument servlet to upload arbitrary files, leading to remote code execution with root privileges. It authenticates as a valid user, uploads an ELF payload and a JSP file to execute it.