rapid7/metasploit-framework — pull request #1709 by jhart-r7 (2013-04-07 03:21:25+00:00)
Title: Initial commit of an exploit module for the CVEs covered by APSB13-03.

Not complete but will currently get command execution on Coldfusion 9.x instances with CSRF protection disabled

Looking for feedback on everything, really, but primarily just how to make this more useful -- dropping a cfm that executes arbitrary code is cool but I want more. Also, I really want to figure out how this was *really* exploited in the wild, because CSRF protection is on by default and this doesn't seem exploitable with it on.