rapid7/metasploit-framework — pull request #1667 by nmonkee (2013-03-26 12:18:41+00:00)
Title: SAP SOAP Service SXPG_COMMAND_EXEC Function Command Injection

This module makes use of the SXPG_COMMAND_EXEC Remote Function Call, through the use of the /sap/bc/soap/rfc SOAP service, to inject and execute OS commands.

SAP Note: 1341333 and 1764994.

http://labs.mwrinfosecurity.com/blog/2012/09/03/sap-parameter-injection
https://service.sap.com/sap/support/notes/1764994
https://service.sap.com/sap/support/notes/1341333