CVE-2012-2174

This Metasploit module exploits a command injection vulnerability in IBM Lotus Notes Client via a crafted notes:// URL, leading to arbitrary command execution. It delivers a payload through an HTTP server and uses JavaScript to trigger the exploit.

This Metasploit module exploits a command injection vulnerability in IBM Lotus Notes Client via a crafted notes:// URL, allowing arbitrary command execution. It delivers a payload through a malicious HTML page that triggers the vulnerability when rendered.