CVE-2012-10027

This Metasploit module exploits an unauthenticated file upload vulnerability in WP-Property <= 1.35.0, allowing arbitrary PHP code execution via a malicious file upload to the uploadify.php endpoint.

This exploit demonstrates an arbitrary file upload vulnerability in WP-Property plugin (v1.35.0) by leveraging the `uploadify.php` endpoint to upload a malicious PHP file (`lo.php`). The PoC uses cURL to send a POST request with the file payload, allowing remote code execution (RCE) via the uploaded shell.

This Metasploit module exploits an unauthenticated file upload vulnerability in the WordPress WP-Property plugin (CVE-2012-10027), allowing arbitrary PHP code execution by uploading a malicious file via the uploadify.php endpoint.