rapid7/metasploit-framework — pull request #982 by wchen-r7 (2012-10-29 08:46:18+00:00)
Title: Add OSVDB-86720 - Clansphere dir traversarl

This module exploits a directory traversal flaw found in Clansphere 2011.3. The application fails to handle the cs_lang parameter properly, which can be used to read any file outside the virtual directory when a require_once() is used.