CVE-2012-1153

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in appRain CMF 0.1.5 or earlier via the uploadify.php endpoint, allowing remote code execution by uploading a malicious PHP file.

This exploit demonstrates an unrestricted file upload vulnerability in appRain CMF <= 0.1.5, allowing an attacker to upload a malicious PHP file and execute arbitrary commands via a reverse shell. The vulnerability arises due to lack of file extension validation and authentication checks in the uploadify.php script.

This Metasploit module exploits an unauthenticated arbitrary PHP file upload vulnerability in appRain CMF 0.1.5 or less via the uploadify.php endpoint, leading to remote code execution.