rapid7/metasploit-framework — pull request #430 by wchen-r7 (2012-05-31 09:45:44+00:00)
Title: Add s40 dir traversal vuln

This module exploits a directory traversal vulnerability found in S40 CMS. The flaw is due to the 'page' function not properly handling the $pid parameter, which allows a malicious user to load an arbitrary file path.