CVE-2012-4959

This exploit targets a remote code execution vulnerability in Novell File Reporter Agent via XML parsing. It crafts a malicious MOF file to execute arbitrary commands on the target system and retrieves the output.

This Metasploit module exploits a directory traversal vulnerability in Novell File Reporter (NFR) Agent to upload arbitrary files via FSFUI records with UICMD 130, leading to remote code execution (RCE). It uploads a VBS payload and a MOF file to execute the payload on the target system.

This Metasploit module exploits a directory traversal vulnerability in Novell File Reporter (NFR) Agent to upload arbitrary files via FSFUI records with UICMD 130. It achieves remote code execution by uploading a VBS payload and a MOF file to execute it.