CVE-2013-10054

This Metasploit module exploits an arbitrary file upload vulnerability in LibrettoCMS 1.1.7 by bypassing file extension checks to upload a malicious PHP file, enabling remote code execution.

This Metasploit module exploits an arbitrary file upload vulnerability in LibrettoCMS 1.1.7 (and prior) by bypassing file extension checks to upload a malicious PHP file without authentication, leading to remote code execution.

This exploit leverages a file upload vulnerability in LibrettoCMS 2.2.2, allowing unauthenticated users to upload a malicious PHP file disguised as a .doc file and rename it to execute arbitrary PHP code on the server.