Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-5452. PoCs published by Metasploit, Security-Assessment.com.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated SQL injection to add a backdoor user and a command injection vulnerability in Watchguard XCS to achieve remote command execution as the 'nobody' user.
Description
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.
Exploits (2)
This Metasploit module exploits an unauthenticated SQL injection to add a backdoor user and a command injection vulnerability in Watchguard XCS to achieve remote command execution as the 'nobody' user.
This exploit demonstrates multiple vulnerabilities in Watchguard XCS <=10.0, including unauthenticated SQL injection, command injection, and privilege escalation. It provides proof-of-concept code for each vulnerability, allowing an attacker to gain root access on the target system.