CVE-2013-0632

This Metasploit module exploits an authentication bypass in Adobe ColdFusion 9 via the RDS component, allowing arbitrary code execution by uploading and executing a CFML payload. It leverages misconfigured or empty RDS passwords to gain administrative access.

This Metasploit module exploits multiple vulnerabilities in Adobe ColdFusion (APSB13-03), including authentication bypass (CVE-2013-0632), directory traversal (CVE-2013-0629), and arbitrary command execution (CVE-2013-0625). It leverages scheduled tasks to drop and execute payloads.

This exploit bypasses the Adobe ColdFusion 9 administrator login by manipulating the 'rdsPasswordAllowed' parameter, allowing unauthorized access when RDS is disabled. The PoC provides a simple HTML form to trigger the vulnerability.

This Metasploit module exploits an authentication bypass in Adobe ColdFusion's RDS component (CVE-2013-0632) by leveraging empty password configurations to gain admin access and execute arbitrary code via a CFML payload dropper.