CVE-2015-5082

This Metasploit module exploits a command injection vulnerability in Endian Firewall's proxy password change CGI script. It allows remote code execution as the 'nobody' user, which has sudo privileges to change the root password.

This Metasploit module exploits a command injection vulnerability in Endian Firewall's proxy password change CGI script, allowing remote code execution as the 'nobody' user, which can escalate to root via sudo permissions.

This exploit leverages a command injection vulnerability in Endian Firewall's proxy user password change CGI script to execute arbitrary commands, resulting in a reverse TCP shell. The exploit constructs a malicious HTTP POST request with a crafted payload in the password fields.

This Metasploit module exploits a command injection vulnerability in Endian Firewall's chpasswd.cgi script, allowing remote code execution as the 'nobody' user, which has sudo privileges to change the root password. The exploit leverages multipart form data to inject commands into the password change fields.