CVE-2012-10033

This exploit demonstrates a command injection vulnerability in Narcissus' backend.php. The 'release' parameter is passed unsanitized to a shell command via passthru(), allowing arbitrary command execution.

This Metasploit module exploits a command injection vulnerability in Narcissus' backend.php via the 'release' parameter, allowing remote code execution under the context of the web server. It leverages the passthru PHP function to execute arbitrary commands.

This Metasploit module exploits a command injection vulnerability in Narcissus' backend.php via the $release parameter, allowing remote code execution through the passthru PHP function. The exploit sends a crafted POST request to execute arbitrary commands.