CVE-2011-3587

This exploit leverages a path traversal vulnerability in Plone's webdav/xmltools endpoint to execute arbitrary commands via the 'os.popen2' module. The PoC demonstrates command injection by exfiltrating '/etc/passwd' over a netcat connection.

This Metasploit module exploits a remote command execution vulnerability in Plone and Zope via a traversal attack on the `p_` class in OFS/misc_.py, allowing arbitrary command execution through the `os/popen2` module. The exploit sends a POST request with the payload encoded in the `cmd` parameter.