rapid7/metasploit-framework — pull request #4155 by pedrib (2014-11-08 11:26:57+00:00)
Title: Create exploit for CVE-2014-8499 - PMP privesc + password disclosure

This is an exploit for an authenticated SQL injection in Password Manager Pro 6.8 to 7.1 build 7105.
It allows a low privileged user (like a guest) to escalate privileges to "super administrator" and dump all the passwords in the system in cleartext.
This module has been well tested in Windows and Linux with several versions between 6.8 and 7.1.