CVE-2013-3502
GroundWork Monitor Enterprise 6.7.0 - Authenticated Remote Code Execution via monarch_scan.cgi
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-3502.
PoCs published by Metasploit, Johannes Greil, juan vazquez, including Metasploit module exploits/linux/http/groundwork_monarch_cmd_exec.
AI-analyzed exploit summary This Metasploit module exploits an OS command injection vulnerability in GroundWork 6.7.0's monarch_scan.cgi via the perl qx function. It authenticates using JOSSO, then injects commands through URI-encoded arguments.
Description
monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie.
Exploits (2)
This Metasploit module exploits an OS command injection vulnerability in GroundWork 6.7.0's monarch_scan.cgi via the perl qx function. It authenticates using JOSSO, then injects commands through URI-encoded arguments.
This Metasploit module exploits a command injection vulnerability in GroundWork 6.7.0's monarch_scan.cgi, allowing authenticated remote code execution via the perl qx function. It authenticates using JOSSO, then injects commands through URI-encoded arguments.