rapid7/metasploit-framework — pull request #654 by wchen-r7 (2012-07-31 18:33:12+00:00)
Title: Add OSVDB-83822

This module exploits a vulnerability found in WebPageTest's Upload Feature. By default, the resultimage.php file does not verify the user-supplied item before saving it to disk, and then places this item in the web directory accessable by remote users. This flaw can be abused to gain remote code execution.