CVE-2012-6330

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # web site for more information on licensing and terms of use # metasploitcom/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit ...

This Metasploit module exploits a vulnerability in the MAKETEXT Foswiki variable By using a specially crafted MAKETEXT, a malicious user can execute shell commands since the input is passed to the Perl "eval" command without first being sanitized The problem is caused by an underlying security issue in the CPAN:Locale::Maketext module Only Foswi ...