CVE-2011-10019

This Metasploit module exploits an arbitrary command execution vulnerability in Spreecommerce 0.60.1 by leveraging unvalidated input passed via the Ruby `send` method. The exploit sends a crafted HTTP GET request with a payload that triggers command execution through `Kernel.fork` and `eval`.

This Metasploit module exploits an arbitrary command execution vulnerability in Spreecommerce 0.60.1 by leveraging unvalidated input passed to the Ruby `send` method. The exploit crafts a malicious URI to execute arbitrary commands via `Kernel.fork` and `eval`.