rapid7/metasploit-framework — pull request #2035 by bwall (2013-06-28 21:53:53+00:00)
Title: Carberp backdoor eval PoC

Carberp C2 web panel backdoor exploit found in leaked Carberp source.
Tested against version in the bot_adm directory, although it does exist in some others as well.
Vulnerability disclosure: http://www.xylibox.com/2013/06/carberp-remote-code-execution-carpwned.html