{"uuid": "a32128d7-8715-47bc-96a3-447e1c105e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_wrt54gl_apply_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, mipsle\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Some Linksys Routers are vulnerable to an authenticated OS command injection in\\n          the Web Interface. Default credentials are admin/admin or admin/password. Since it\\n          is a blind os command injection vulnerability, there is no output for the executed\\n          command when using the cmd generic payload. A ping command against a controlled\\n          system could be used for testing purposes. The user must be prudent when using this\\n          module since it modifies the router configuration while exploitation, even when it\\n          tries to restore previous values.\", \"disclosure_date\": \"2013-01-18\", \"fullname\": \"exploit/linux/http/linksys_wrt54gl_apply_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Linksys WRT54GL apply.cgi Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/linksys_wrt54gl_apply_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 0, \"ref_name\": \"linux/http/linksys_wrt54gl_apply_exec\", \"references\": [\"CVE-2005-2799\", \"OSVDB-89912\", \"BID-57459\", \"EDB-24202\", \"URL-http://www.s3cur1ty.de/m1adv2013-001\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"CMD\", \"Linux mipsel Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:43.506744Z"}