CVE-2012-10037

This Metasploit module exploits a command injection vulnerability in PhpTax 0.8 via the 'pfilez' parameter in drawimage.php, allowing arbitrary remote code execution under the context of the web server. The exploit sends a crafted GET request with the payload embedded in the 'pfilez' parameter.

The exploit leverages a file inclusion vulnerability in phptax 0.8 via the `pfilez` parameter in `drawimage.php`, allowing remote code execution through command injection. The PoC demonstrates a bind shell using netcat.

This Metasploit module exploits a command injection vulnerability in PhpTax 0.8 via the 'pfilez' parameter in drawimage.php, allowing arbitrary code execution without authentication.