rapid7/metasploit-framework — pull request #428 by wchen-r7 (2012-05-30 15:41:59+00:00)
Title: Add PHP Volunteer Management System exploit

This module exploits a vulnerability found in PHP Volunteer Management System, version v1.0.2 or prior. This application has an upload feature that allows an authenticated user to upload anything to the 'uploads' directory, which is actually reachable by anyone without a credential. An attacker can easily abuse this upload functionality first by logging in with the default credential (admin:volunteer), upload a malicious payload, and then execute it by sending another GET request.