EDB-17993
functionalApple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2011-10-18catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-1774US | high8.8 | Exploit | ||
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a… | ||||
| CVE-2011-1425US | medium5.1 | Exploit | ||
xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary file… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan