CVE-2012-10045

This Metasploit module exploits an unauthenticated arbitrary PHP file upload vulnerability in XODA 0.4.5, allowing remote code execution by uploading a malicious PHP file via a multipart form request.

This is a vulnerability writeup describing stored XSS and arbitrary file upload vulnerabilities in XODA Document Management System version 0.4.5. It includes steps to reproduce the vulnerabilities but does not contain exploit code.

This Metasploit module exploits an unauthenticated arbitrary PHP file upload vulnerability in XODA 0.4.5, allowing remote code execution by uploading a malicious PHP file via a multipart form request.