{"uuid": "e94c9769-b5cd-4122-aa48-2750c664d8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10043", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/astium_sqli_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits vulnerabilities found in Astium astium-confweb-2.1-25399 RPM and\\n          lower. A SQL Injection vulnerability is used to achieve authentication bypass and gain\\n          admin access. From an admin session arbitrary PHP code upload is possible. It is used\\n          to add the final PHP payload to \\\"/usr/local/astium/web/php/config.php\\\" and execute the\\n          \\\"sudo /sbin/service astcfgd reload\\\" command to reload the configuration and achieve\\n          remote root code execution.\", \"disclosure_date\": \"2013-09-17\", \"fullname\": \"exploit/linux/http/astium_sqli_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Astium Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/astium_sqli_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"linux/http/astium_sqli_upload\", \"references\": [\"CVE-2013-10043\", \"OSVDB-88860\", \"EDB-23831\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Astium 2.1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:23.245678Z"}