rapid7/metasploit-framework — pull request #4137 by pedrib (2014-11-05 20:35:58+00:00)
Title: Add Eventlog Analzyer exploit for CVE-2014-6038/6039

This adds an exploit for two zero day vulnerabilities in ManageEngine EventLog Analyzer.
Versions 7 to 9.9 are vulnerable to a SQL database information disclosure (allowing you to dump any table from the database) and an information disclosure vulnerability that allows extracting the password for any managed Windows and AS/400 hosts.

This module has been thoroughly tested on Windows and Linux versions of EventLog Analyzer.