CVE-2013-1081

This Metasploit module exploits a local file inclusion vulnerability in Novell Zenworks Mobile Device Management to achieve remote code execution by uploading and executing a malicious payload.

This repository contains a working exploit for CVE-2013-1081, targeting Novell Zenworks Mobile Device Management (MDM) version 2.6.0. The exploit leverages a local file inclusion (LFI) vulnerability to extract administrator credentials and achieve remote code execution (RCE).

This Metasploit module exploits an SQL injection vulnerability in Novell Zenworks MDM to extract administrator credentials by leveraging PHP session manipulation and SQL query execution.

This Metasploit module exploits a local file inclusion vulnerability in Novell Zenworks Mobile Management's MDM.php script, allowing unauthenticated remote code execution via directory traversal in the 'language' parameter of a POST request to DUSAP.php.