This Metasploit module exploits a directory traversal vulnerability in ThinVNC versions 1.0b1 and prior which allows unauthenticated users to retrieve arbitrary files, including the ThinVNC configuration file. This Metasploit module has been tested successfully on ThinVNC versions 1.0b1 and "ThinVNC_Latest" (2018-12-07).
9f7e4c4546a87e391ac57736315d855264a0c23fffbb62dd4066111164fc5ac9
ThinVNC version 1.0b1 suffers from an authentication bypass vulnerability.
fbcbacfabc4114ff32f183f057e90e6b3f4412e90eb0e8b25527c27c54299bf1