CVE-2016-2056

This Metasploit module exploits a command injection vulnerability in Xymon's useradm.sh script, allowing authenticated users to execute arbitrary commands as the web server user. The exploit leverages improper input validation in the username field during user creation.

This Metasploit module exploits a command injection vulnerability in Xymon's useradm.sh script, allowing authenticated users to execute arbitrary commands via improperly sanitized input passed to the htpasswd command.