phusion/rails-cve-2012-5664-test

PoC

Demo app showing how the Rails CVE-2013-5664 vulnerability works.

view exploit source poc_in_githubauthor phusionpublished 2013-01-03catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-5664US	medium4.3	2.29% (83rd)	Exploit	2013-08-31
Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to…
CVE-2012-5664US	—	—	Exploit	2012-12-26
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6496, CVE-2012-6497. Reason: this candidate was intended for one issue, but the candidate was publicly used…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.