{"vulnerability": "CVE-2013-0136", "sightings": [{"uuid": "7b11497c-537a-4b2c-984a-1cd38fbc7a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0136", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "43adf0fe-2b8b-44da-a604-6e010ef57f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0136", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:11.000000Z"}, {"uuid": "a0ddbcc2-1685-4f94-bda4-c0e1c774d633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0136", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/mutiny_frontend_read_delete.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "eed5a022-6d31-41ad-859c-81cbb6526ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0136", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/mutiny_frontend_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e1a50f89-bdc7-49ce-84e4-6bd9b32b716a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-0136", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/25517", "content": "", "creation_timestamp": "2013-05-17T00:00:00.000000Z"}, {"uuid": "8c351acd-b8b1-4a47-bb29-e4c8467d1edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0136", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/mutiny_frontend_read_delete.rb", "content": "{\"actions\": [{\"description\": \"Delete arbitrary file\", \"name\": \"Delete\"}, {\"description\": \"Read arbitrary file\", \"name\": \"Read\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits the EditDocument servlet from the frontend on the Mutiny 5\\n          appliance. The EditDocument servlet provides file operations, such as copy and\\n          delete, which are affected by a directory traversal vulnerability. Because of this,\\n          any authenticated frontend user can read and delete arbitrary files from the system\\n          with root privileges. In order to exploit the vulnerability a valid user (any role)\\n          in the web frontend is required. The module has been tested successfully on the\\n          Mutiny 5.0-1.07 appliance.\", \"disclosure_date\": \"2013-05-15\", \"fullname\": \"auxiliary/admin/http/mutiny_frontend_read_delete\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"Mutiny 5 Arbitrary File Read and Delete\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"os-resource-loss\"]}, \"path\": \"/modules/auxiliary/admin/http/mutiny_frontend_read_delete.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/mutiny_frontend_read_delete\", \"references\": [\"CVE-2013-0136\", \"US-CERT-VU-701572\", \"URL-http://web.archive.org/web/20250114041839/https://www.rapid7.com/blog/post/2013/05/15/new-1day-exploits-mutiny-vulnerabilities/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:47.964047Z"}, {"uuid": "4e7040f5-f85f-48f2-b601-8ff93ce11da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0136", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/mutiny_frontend_upload.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a code execution flaw in the Mutiny 5 appliance. The\\n          EditDocument servlet provides a file upload function to authenticated users. A\\n          directory traversal vulnerability in the same functionality allows for arbitrary\\n          file upload, which results in arbitrary code execution with root privileges. In\\n          order to exploit the vulnerability a valid user (any role) in the web frontend is\\n          required. The module has been tested successfully on the Mutiny 5.0-1.07 appliance.\", \"disclosure_date\": \"2013-05-15\", \"fullname\": \"exploit/linux/http/mutiny_frontend_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Mutiny 5 Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/mutiny_frontend_upload.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/mutiny_frontend_upload\", \"references\": [\"CVE-2013-0136\", \"OSVDB-93444\", \"US-CERT-VU-701572\", \"URL-https://www.rapid7.com/blog/post/2013/05/15/new-1day-exploits-mutiny-vulnerabilities\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Mutiny 5.0-1.07 Appliance (Linux)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:45.212855Z"}]}