{"vulnerability": "cve-2013-1003", "sightings": [{"uuid": "205c95a3-a734-4a41-92a1-9f4f83a931ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10039", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "296f1ed9-688b-47b7-944a-3f0fa930f3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10038", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "a14d10a8-4d06-4845-baa0-22f3c460e6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10032", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "6a2220d3-c210-4d46-b4e4-3650b8f4c474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10033", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "35c84a03-a55f-4ad6-a573-c737044f5943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10034", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "f696eb3f-a285-469d-80af-f9ee698b9594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10035", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "dd60dba7-2f15-48dd-8627-a3291c351b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10036", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "c8e7a347-edc8-4fdd-8e6d-4adc9f2c0016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10037", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "11d56465-82eb-4271-a85c-b4ed4f9d4a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10039", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "7b4132e2-2223-4472-9c8a-9de99cee611f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10035", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/processmaker_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b941eeda-e6b1-4db5-b1eb-3155f1bc765f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10034", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/kaseya_uploadimage_file_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "10e4f048-fb0e-4a29-9e59-671c8b013caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10038", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/flashchat_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8993b387-cfb6-4e81-b7bb-621edc9d2f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10032", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/get_simple_cms_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "0cae89cf-ebb6-4502-bfe4-eea0525208cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10033", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/kimai_sqli.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "adf28e54-4cf6-4253-9deb-cdb3c24b92ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10037", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/webtester_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d8b7be5f-50df-43cc-821f-00f69d31ae72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10036", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "7bb39924-bff0-4a6e-8547-20497758ca80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10030", "type": "seen", "source": "https://t.me/ctinow/196091", "content": "https://ift.tt/QNJDtaw\nCVE-2013-10030", "creation_timestamp": "2024-02-29T02:21:28.000000Z"}, {"uuid": "ffb916a2-6c8f-4773-a2ac-ae2c0dbed117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10030", "type": "seen", "source": "https://t.me/ctinow/196092", "content": "https://ift.tt/QNJDtaw\nCVE-2013-10030", "creation_timestamp": "2024-02-29T02:26:15.000000Z"}, {"uuid": "257676a7-3e8a-4445-bb12-33429494535d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10039", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bperry\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a command injection flaw to create a shell script\\n          on the filesystem and execute it. If GestioIP is configured to use no authentication,\\n          no password is required to exploit the vulnerability. Otherwise, an authenticated\\n          user is required to exploit.\", \"disclosure_date\": \"2013-10-04\", \"fullname\": \"exploit/multi/http/gestioip_exec\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"GestioIP Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_exec\", \"references\": [\"CVE-2013-10039\", \"URL-http://sourceforge.net/p/gestioip/gestioip/ci/ac67be9fce5ee4c0438d27dfa5c1dcbca08c457c/\", \"URL-https://github.com/rapid7/metasploit-framework/pull/2461\", \"URL-https://www.rapid7.com/blog/post/2013/10/03/gestioip-authenticated-remote-command-execution-module\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic GestioIP 3.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.629877Z"}, {"uuid": "2874a5b9-a7a3-4811-83d9-f820ddde81fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10035", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/processmaker_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a PHP code execution vulnerability in the\\n          'neoclassic' skin for ProcessMaker Open Source which allows any\\n          authenticated user to execute PHP code. The vulnerable skin is\\n          installed by default in version 2.x and cannot be removed via\\n          the web interface.\", \"disclosure_date\": \"2013-10-24\", \"fullname\": \"exploit/multi/http/processmaker_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"ProcessMaker Open Source Authenticated PHP Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/processmaker_exec.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/processmaker_exec\", \"references\": [\"CVE-2013-10035\", \"OSVDB-99199\", \"BID-63411\", \"URL-http://bugs.processmaker.com/view.php?id=13436\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"ProcessMaker Open Source 2.x (PHP Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:09.832452Z"}, {"uuid": "fc25049c-6f29-4a77-a4da-73838d26fb77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10032", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/get_simple_cms_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Ahmed Elhady Mohamed\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability in GetSimple CMS. By abusing the\\n          upload.php file, a malicious authenticated user can upload an arbitrary file,\\n          including PHP code, which results in arbitrary code execution.\", \"disclosure_date\": \"2014-01-04\", \"fullname\": \"exploit/unix/webapp/get_simple_cms_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"GetSimpleCMS PHP File Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/get_simple_cms_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/get_simple_cms_upload_exec\", \"references\": [\"CVE-2013-10032\", \"EDB-25405\", \"OSVDB-93034\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:42.387956Z"}, {"uuid": "04876e47-12d8-42fc-a42f-6b1ef972fd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10038", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/flashchat_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"x-hayben21\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability found in FlashChat\\n          versions 6.0.2 and 6.0.4 to 6.0.8. Attackers can abuse the upload\\n          feature in order to upload malicious PHP files without authentication\\n          which results in arbitrary remote code execution as the web server user.\", \"disclosure_date\": \"2013-10-04\", \"fullname\": \"exploit/unix/webapp/flashchat_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"FlashChat Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/flashchat_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/flashchat_upload_exec\", \"references\": [\"CVE-2013-10038\", \"OSVDB-98233\", \"EDB-28709\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic (PHP Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:41.984605Z"}, {"uuid": "7e4add42-3904-4f67-a931-6bbf8d6d365a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10033", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/kimai_sqli.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"drone\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability in Kimai version\\n          0.9.2.x. The 'db_restore.php' file allows unauthenticated users to\\n          execute arbitrary SQL queries. This module writes a PHP payload to\\n          disk if the following conditions are met: The PHP configuration must\\n          have 'display_errors' enabled, Kimai must be configured to use a\\n          MySQL database running on localhost; and the MySQL user must have\\n          write permission to the Kimai 'temporary' directory.\", \"disclosure_date\": \"2013-05-21\", \"fullname\": \"exploit/unix/webapp/kimai_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Kimai v0.9.2 'db_restore.php' SQL Injection\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/kimai_sqli.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"unix/webapp/kimai_sqli\", \"references\": [\"CVE-2013-10033\", \"EDB-25606\", \"OSVDB-93547\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Kimai version 0.9.2.x (PHP Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.852001Z"}, {"uuid": "1e05c993-371d-47b2-989e-4755e58300d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10037", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/webtester_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution vulnerability in WebTester\\n          version 5.x. The 'install2.php' file allows unauthenticated users to\\n          execute arbitrary commands in the 'cpusername', 'cppassword' and\\n          'cpdomain' parameters.\", \"disclosure_date\": \"2013-10-17\", \"fullname\": \"exploit/unix/webapp/webtester_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"WebTester 5.x Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/webtester_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/webtester_exec\", \"references\": [\"CVE-2013-10037\", \"OSVDB-98750\", \"URL-https://sourceforge.net/p/webtesteronline/bugs/3/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"WebTester version 5.x\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:49.723430Z"}, {"uuid": "30067e25-5660-499f-a37a-0e5698974b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10036", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"metacom\", \"wvu \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack-based buffer overflow in Beetel Connection\\n          Manager. The vulnerability exists in the parsing of the UserName\\n          parameter in the NetConfig.ini file.\\n\\n          The module has been tested successfully against version\\n          PCW_BTLINDV1.0.0B04 on Windows XP SP3 and Windows 7 SP1.\", \"disclosure_date\": \"2013-10-12\", \"fullname\": \"exploit/windows/fileformat/beetel_netconfig_ini_bof\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Beetel Connection Manager NetConfig.ini Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/beetel_netconfig_ini_bof\", \"references\": [\"CVE-2013-10036\", \"OSVDB-98714\", \"EDB-28969\"], \"rport\": null, \"session_types\": false, \"targets\": [\"PCW_BTLINDV1.0.0B04 (WinXP SP3, Win7 SP1)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:21.600654Z"}, {"uuid": "556bc5b8-86f9-4618-99a3-c5220e679c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10034", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/kaseya_uploadimage_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Thomas Hibbert \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload vulnerability found in Kaseya versions below\\n          6.3.0.2. A malicious user can upload an ASP file to an arbitrary directory without previous\\n          authentication, leading to arbitrary code execution with IUSR privileges.\", \"disclosure_date\": \"2013-11-11\", \"fullname\": \"exploit/windows/http/kaseya_uploadimage_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Kaseya uploadImage Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/kaseya_uploadimage_file_upload.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/kaseya_uploadimage_file_upload\", \"references\": [\"CVE-2013-10034\", \"OSVDB-99984\", \"BID-63782\", \"EDB-29675\", \"URL-http://security-assessment.com/files/documents/advisory/Kaseya%20File%20Upload.pdf\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Kaseya KServer / Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:52.750946Z"}]}