{"uuid": "4e7040f5-f85f-48f2-b601-8ff93ce11da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0136", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/mutiny_frontend_upload.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a code execution flaw in the Mutiny 5 appliance. The\\n          EditDocument servlet provides a file upload function to authenticated users. A\\n          directory traversal vulnerability in the same functionality allows for arbitrary\\n          file upload, which results in arbitrary code execution with root privileges. In\\n          order to exploit the vulnerability a valid user (any role) in the web frontend is\\n          required. The module has been tested successfully on the Mutiny 5.0-1.07 appliance.\", \"disclosure_date\": \"2013-05-15\", \"fullname\": \"exploit/linux/http/mutiny_frontend_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Mutiny 5 Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/mutiny_frontend_upload.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/mutiny_frontend_upload\", \"references\": [\"CVE-2013-0136\", \"OSVDB-93444\", \"US-CERT-VU-701572\", \"URL-https://www.rapid7.com/blog/post/2013/05/15/new-1day-exploits-mutiny-vulnerabilities\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Mutiny 5.0-1.07 Appliance (Linux)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:45.212855Z"}