Exploitation Summary
EIP tracks 4 public exploits for CVE-2013-1081.
PoCs published by Metasploit, steponequit, steponequit, Andrea Micalizzi (aka rgod), including Metasploit module auxiliary/scanner/http/novell_mdm_creds.
AI-analyzed exploit summary This Metasploit module exploits a local file inclusion vulnerability in Novell Zenworks Mobile Device Management to achieve remote code execution by uploading and executing a malicious payload.
Description
Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter.
Exploits (4)
This Metasploit module exploits a local file inclusion vulnerability in Novell Zenworks Mobile Device Management to achieve remote code execution by uploading and executing a malicious payload.
This repository contains a working exploit for CVE-2013-1081, targeting Novell Zenworks Mobile Device Management (MDM) version 2.6.0. The exploit leverages a local file inclusion (LFI) vulnerability to extract administrator credentials and achieve remote code execution (RCE).
This Metasploit module exploits an SQL injection vulnerability in Novell Zenworks MDM to extract administrator credentials by leveraging PHP session manipulation and SQL query execution.
This Metasploit module exploits a local file inclusion vulnerability in Novell Zenworks Mobile Management's MDM.php script, allowing unauthenticated remote code execution via directory traversal in the 'language' parameter of a POST request to DUSAP.php.