rapid7/metasploit-framework — pull request #414 by wchen-r7 (2012-05-23 22:51:30+00:00)
Title: Add CVE-2012-1153

This module exploits a vulnerability found in appRain's Content Management Framework (CMF), version 0.1.5 or less. By abusing the uploadify.php, a malicious user can upload a file to the uploads/ directory without any authentication, which results in arbitrary code execution.