{"uuid": "f6e826d1-a48e-4475-93e5-0f58c706573d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-2068", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cfme_manageiq_evm_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"ruby\", \"author\": [\"Ramon de C Valle \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a path traversal vulnerability in the \\\"linuxpkgs\\\"\\n        action of \\\"agent\\\" controller of the Red Hat CloudForms Management Engine 5.1\\n        (ManageIQ Enterprise Virtualization Manager 5.0 and earlier).\\n        It uploads a fake controller to the controllers directory of the Rails\\n        application with the encoded payload as an action and sends a request to\\n        this action to execute the payload. Optionally, it can also upload a routing\\n        file containing a route to the action. (Which is not necessary, since the\\n        application already contains a general default route.)\", \"disclosure_date\": \"2013-09-04\", \"fullname\": \"exploit/linux/http/cfme_manageiq_evm_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"Red Hat CloudForms Management Engine 5.1 agent/linuxpkgs Path Traversal\", \"needs_cleanup\": true, \"notes\": {}, \"path\": \"/modules/exploits/linux/http/cfme_manageiq_evm_upload_exec.rb\", \"platform\": \"Ruby\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/cfme_manageiq_evm_upload_exec\", \"references\": [\"CVE-2013-2068\", \"CWE-22\", \"URL-https://bugzilla.redhat.com/show_bug.cgi?id=960422\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:25.952745Z"}