CVE-2012-5357

This Metasploit module exploits CVE-2012-5357 in Ektron CMS 8.02 by leveraging insecure XSLT processing to achieve remote code execution. It generates a malicious XSLT file that writes and executes a payload on the target system.

This Metasploit module exploits a vulnerability in Ektron CMS 8.02 (before SP5) by leveraging insecure XSLT processing to execute arbitrary code via C# script injection. It uses VirtualAlloc and CreateThread to execute shellcode, achieving remote code execution with NETWORK SERVICE privileges.