rapid7/metasploit-framework — pull request #4493 by pedrib (2014-12-31 02:05:21+00:00)
Title: release exploit for CVE-2014-7862

This commit creates an exploit for CVE-2014-7862. This is a vulnerability in ManageEngine Desktop Central that allows a user to create an administrator account. This can then be used to execute code on all devices managed by Desktop Central.

This exploit has been well tested in all versions from v7 onwards. I will add the OSVDB and full disclosure links as they become available.