CVE-2013-10038

This exploit demonstrates a file upload vulnerability in FlashChat v6.0.8 and earlier versions. The provided HTML form allows an attacker to upload arbitrary files to the server via the vulnerable upload.php script.

This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in FlashChat versions 6.0.2 and 6.0.4 to 6.0.8, allowing remote code execution as the web server user by uploading a malicious PHP file.