CVE-2012-10038

This Metasploit module exploits an arbitrary file upload vulnerability in Auxilium RateMyPet's banner upload feature, allowing remote code execution via PHP or Linux payloads.

This exploit demonstrates multiple vulnerabilities in Auxilium PetRatePro, including unauthenticated admin creation, SQL injection, and remote file upload. The PoC provides direct HTTP requests and forms to exploit these issues.

This Metasploit module exploits an arbitrary file upload vulnerability in Auxilium RateMyPet, allowing remote code execution by uploading a malicious PHP file via the banner upload feature.