CVE-2013-3631

This Metasploit module exploits an authenticated remote code execution vulnerability in NAS4Free by posting PHP code to a special HTTP script. It authenticates, retrieves an auth token, and sends a multipart form with the payload to execute arbitrary PHP code.

This Metasploit module exploits an authenticated remote code execution vulnerability in NAS4Free by posting PHP code to a special HTTP script. It authenticates, retrieves an auth token, and sends a multipart form with the payload to execute arbitrary PHP code.