rapid7/metasploit-framework — pull request #2716 by rcnunez (2013-12-03 13:51:16+00:00)
Title: Pandora Authentication Bypass and File Upload Exec

This module exploits an authentication bypass vulnerability in
Pandora v3.1 as disclosed by Juan Galiana Lara. It also integrates
with the built-in pandora upload which allows an admin to upload
arbitrary files to the '/images/' directory.

This module was created as an exercise in the Metasploit Mastery Class
at Blackhat that was facilitated by egypt and mubix.