MOVEit SQL Injection

This Metasploit module exploits an SQL injection vulnerability in the MOVEit Transfer web application that allows an unauthenticated attacker to gain access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker can leverage an information leak be able to upload a .NET deserialization payload.

access application azure database deserialization engine exploits information injection leak metasploit microsoft microsoft sql microsoft sql server moveit moveit transfer mysql payload server sql sql injection sql server transfer upload vulnerability web web application