rapid7/metasploit-framework — pull request #688 by wchen-r7 (2012-08-12 22:57:29+00:00)
Title: ADD OSVDB-84517 Cyclope Employee Surveillance Solution v6 SQL Injection

This module exploits a SQL injection found in Cyclope Employee Surveillance Solution. Because the login script does not properly handle the user-supplied username parameter, a malicious user can manipulate the SQL query, and allows arbitrary code execution under the context of 'SYSTEM'.