rapid7/metasploit-framework — pull request #1030 by nmonkee (2012-11-07 11:31:03+00:00)
Title: SAP SOAP RFC DBMCLI Command Injection (via SXPG_CALL_SYSTEM)

This module makes use of the SXPG_CALL_SYSTEM Remote Function Call (via SOAP) to execute OS commands via DBMCLI command as configured in SM69. See http://labs.mwrinfosecurity.com/blog/2012/09/03/sap-parameter-injection for more information.