many change in the code and replace at the correct place the module
removed the old exploit
initial
Add OSVDB reference for openemr_sqli_privesc_upload
Add MS13-069 (CVE-2013-3205) IE ccaret object use-after-free

This module exploits a use-after-free vulnerability found in Internet Explorer,
specifically in how the browser handles the caret (text cursor) object. In IE's
standards mode, the caret handling's vulnerable state can be triggered by first
setting up an editable page with an input field, and then we can force the caret
to update in an onbeforeeditfocus event by setting the body's innerHTML property.
In this event handler, mshtml!CCaret::`vftable' can be freed using a document.write()
function, however, mshtml!CCaret::UpdateScreenCaret remains unaware aware of this
change, and still uses the same reference to the CCaret object. When the function
tries to use this invalid reference to call a virtual function at offset 0x2c, it
finally results a crash. Precise control of the freed object allows arbitrary code
execution under the context of the user.

The vuln works against IE8 on Win 7, but the current version of the custom spray
doesn't actually work well against that target. More work is needed before we can
add that target for sure.  The reason a custom spray is needed is because the
document.write() function erases the typical spray routines we use like
js_property_spray, or the heaplib + substring one.  Tried using an iframe too,
but onbeforeeditfocus event doesn't seem to work well in an iframe (does not
fire when innerHTML is used.)
Remove author, all the credits go to corelanc0der and sinn3r
Land #2401, @wchen-r7's exploit for cve-2013-3205
Land #2400 - Add OSVDB reference for openemr_sqli_privesc_upload
Nearly
Address feedback
Retabbed
Account for username length

Username is part of the overflowing string, need to account for that
Rename pcman module

Because this is clearly a msf module, we don't need 'msf' as a
filename. The shorter the better.
Modify check

Since auth is required, check function needs to look into that too
Land #2370 - PCMAN FTP Server post-auth stack buffer overflow
Correct powershell
Clean glpi_install_rce
Fix small bugs on glpi_install_rce
Land #2388, @dummys's exploit for CVE-2013-5696
Complete CmdStagerEcho code doc