CVE-2012-10047

This Metasploit module exploits a SQL injection vulnerability in Cyclope Employee Surveillance Solution v6.2 or older, allowing arbitrary code execution under the context of 'SYSTEM' via malicious username parameter manipulation.

This exploit demonstrates SQL injection leading to remote code execution in Cyclope Employee Surveillance Solution v6.0. It leverages improper input sanitization in the login form's username parameter to write a PHP backdoor, enabling arbitrary command execution.

This Metasploit module exploits a SQL injection vulnerability in Cyclope Employee Surveillance Solution v6.2 or older, allowing arbitrary code execution under the context of 'SYSTEM' by injecting a PHP payload that writes and executes a malicious executable.