CVE-2012-10044

This Metasploit module exploits an arbitrary file creation vulnerability in MobileCartly 1.0 via the savepage.php file, which lacks permission checks. It allows attackers to write PHP payloads to the server and execute them, achieving remote code execution (RCE).

This exploit demonstrates an arbitrary file write vulnerability in MobileCartly 1.0, allowing an attacker to write malicious PHP code to a file via the 'savepage.php' endpoint. The PoC includes a simple command execution payload to achieve remote code execution (RCE).

This Metasploit module exploits an arbitrary file creation vulnerability in MobileCartly 1.0 via the savepage.php file, which allows unauthenticated users to write PHP payloads to the server and achieve remote code execution.