rapid7/metasploit-framework — pull request #785 by wchen-r7 (2012-09-13 15:05:04+00:00)
Title: Add OSVDB-82978 module

This module exploits a vuln in qdPM - a web-based project management software. The user profile's photo upload feature can be abused to upload any arbitrary file onto the victim server
machine, which allows remote code execution. However, note in order to use this module, the attacker must have a valid cred to sign.