Roxy-WI Remote Command Execution
Posted by deepcore on July 27, 2022 – 6:57 pm
This Metasploit module exploits an unauthenticated command injection vulnerability in Roxy-WI versions prior to 6.1.1.0. Successful exploitation results in remote code execution under the context of the web server user. Roxy-WI is an interface for managing HAProxy, Nginx and Keepalived servers.
Post a reply
You must be logged in to post a comment.