CVE-2012-10056

This Metasploit module exploits an arbitrary file upload vulnerability in PHP Volunteer Management System v1.0.2, allowing authenticated users to upload and execute malicious PHP payloads.

This is a writeup detailing two vulnerabilities in PHP Volunteer Management System v1.0.2: unrestricted file upload leading to RCE and persistent XSS. It provides PoC steps but no actual exploit code.

This Metasploit module exploits an arbitrary file upload vulnerability in PHP Volunteer Management System v1.0.2, allowing authenticated attackers to upload and execute malicious PHP files. The exploit leverages default credentials (admin:volunteer) to authenticate, uploads a PHP payload, and executes it by accessing the uploaded file.