rapid7/metasploit-framework — pull request #713 by jvazquez-r7 (2012-08-21 22:58:44+00:00)
Title: added module for XODA file upload RCE

Tested successfully on XODA 0.4.5 and Ubuntu 10.04.

Rex::MIME::Message isn't used because XODA isn't comfortable with the EOL added at the end of every part. In fact, some "webapp" modules doesn't use Rex::MIME::Message for this reason. Maybe the Rex::MIME::Message should be updated. It woud do easier to write file upload type modules.