CVE-2012-4957

This Metasploit module exploits a vulnerability in Novell File Reporter (NFR) Agent to retrieve arbitrary files via a crafted SRS Record request. It sends a POST request to /FSF/CMD with a specific XML payload to read files from the target system.

This exploit leverages a remote code execution vulnerability in Novell File Reporter Agent by sending a crafted XML payload to trigger arbitrary command execution via a malicious MOF file. The exploit uses WMI event subscription to execute VBScript, demonstrating a full RCE chain.