rapid7/metasploit-framework — pull request #1084 by nmonkee (2012-11-20 15:37:39+00:00)
Title: sap_soap_rfc_dbmcli_sxpg_command_exec

This module makes use of the SXPG_COMMAND_EXEC Remote Function Call, through the use of the /sap/bc/soap/rfc SOAP service, to inject and execute OS commands via the DBMCLI executable. See http://labs.mwrinfosecurity.com/blog/2012/09/03/sap-parameter-injection for more info.