CVE-2012-10042

This exploit demonstrates multiple vulnerabilities in sflog! CMS/Blog system, including Local File Inclusion (LFI), admin password disclosure, and arbitrary file upload. The PoC provides clear examples of how to exploit these vulnerabilities with specific HTTP requests and file paths.

This Metasploit module exploits an arbitrary file upload vulnerability in Sflog! CMS 1.0 by leveraging default admin credentials to upload a malicious PHP payload, achieving remote code execution.