Updated coldfusion_local_traversal as described in Redmine Feature #6822
fixed an error that occurred when patching.
Added module for CVE-2012-5088
Added new module for cve-2012-5076
cleanup
cleanup
Fixed loot formatting so data is under the proper column

The credentials table was defined with the columns "User", "Password", "Host", "Port", and "SSL".  Credentials were not added in that order, however. They were added in the order "host, port, user, password, ssl" in this line:

credentials << [cred['host'], cred['port'], cred['user'], cred['password'], cred['ssl']]

I changed the order the columns were defined to fix this.

The permissions table had a similar issue. The "FileWrite" column was missing, so I added it. I also moved the "Home" column to after the "AutoCreate" column. Now the line:

permissions << [perm['host'], perm['user'], perm['dir'], perm['fileread'], perm['filewrite'], perm['filedelete'], perm['fileappend'],perm['dircreate'], perm['dirdelete'], perm['dirlist'], perm['dirsubdirs'], perm['autocreate']]

works correctly.
title updated
File/dir brute forcer using MySQL
Fixed msftidy stuff
stopped using fixed table name
added a warning and using optpath
added a warning and using optpath
Brute force directory and file names with MySQL
Noted support for importing XML reports.
Updates the progress function

Because the previous one was wrong.
replace unless rhosts.include? with rhosts.uniq!

seems like this will speed up the process due to far less Array lookups
Cleanup for mysql_file_enum.rb
Fix a stack overflow in bidirectional pipe
Fix NoMethodError if handler has no ParentModule

db.rb assumes that multi/handler sessions have a ParentModule defined
in their datastore. This assumption breaks when a user sets up a
multi/handler by hand to receive a session from another user (e.g.,
via multi_meter_inject).

When db.rb tries to access a member of a nil ParentModule, a
stacktrace is dumped to framework.log.