CVE-2013-10058

This Metasploit module exploits an authenticated OS command injection vulnerability in Linksys WRT160nv2 routers via the apply.cgi endpoint. It uses TFTP to stage and execute a MIPS payload, demonstrating full remote code execution.

This exploit demonstrates an OS command injection vulnerability in Linksys WRT160Nv2 firmware v2.0.03 via the `ping_size` parameter in `apply.cgi`, allowing arbitrary command execution. It also includes details on directory traversal, XSS, and CSRF vulnerabilities.

This Metasploit module exploits an authenticated OS command injection vulnerability in Linksys WRT160nv2 routers via the apply.cgi endpoint. It leverages default credentials (admin/admin or admin/password) to execute arbitrary commands, including staging and executing a MIPS payload via TFTP.