CVE-2013-1892

This exploit leverages the nativeHelper.apply feature in MongoDB's Spidermonkey JavaScript engine to execute arbitrary shellcode. It constructs a malicious JavaScript payload that triggers remote code execution by exploiting improper input validation in the $where clause.

This Metasploit module exploits CVE-2013-1892 in MongoDB's nativeHelper.apply function to achieve remote code execution via heap spraying and ROP chain manipulation. It targets MongoDB 2.2.3 on Linux systems.

This Metasploit module exploits a remote code execution vulnerability in MongoDB's nativeHelper.apply function via a crafted JavaScript payload and ROP chain. It targets MongoDB 2.2.3 on Linux systems.