Spencer,

Yes - i submitted EDB 4 hours prior to this pull request - waiting for the EDB#.  after receipt will place number.

Chris Hebert

> On May 9, 2014, at 3:22 PM, Spencer McIntyre <notifications@github.com> wrote:
> 
> In modules/auxiliary/gather/alienvault_newpolicyform_sqli.rb:
> 
> > +      'Name'           => "AlienVault Authenticated SQL Injection Arbitrary File Read",
> > +      'Description'    => %q{
> > +        AlienVault 4.6.1 and below is susceptible to an authenticated SQL injection attack against
> > +        newpolicyform.php using the 'insertinto' parameter.  This module exploits the 
> > +	lack of input filtering to read an arbitrary file from the file system.
> > +        Any authenticated user is able to exploit this, as administrator
> > +        privileges are not required.
> > +      },
> > +      'License'        => MSF_LICENSE,
> > +      'Author'         =>
> > +        [
> > +          'Chris Hebert <chrisdhebert[at]gmail.com>'
> > +        ],
> > +      'References'     =>
> > +        [
> > +          ['EDB', '#####']   #<<<<Confirm--------
> Is there a corresponding exploit-db PoC for this vulnerability? This looks like a place holder.
> 
> —
> Reply to this email directly or view it on GitHub.