CVE-2019-9692

This Metasploit module exploits a file upload vulnerability in CMS Made Simple's Showtime2 module (CVE-2019-9692), allowing authenticated users to upload malicious PHP files disguised as watermark images, leading to remote code execution.

This exploit targets an authenticated arbitrary file upload vulnerability in the Showtime2 module for CMS Made Simple. It logs in, uploads a PHP shell, and spawns a reverse shell using netcat.

This Metasploit module exploits a file upload vulnerability in CMS Made Simple's Showtime2 module (CVE-2019-9692), allowing authenticated users to upload malicious PHP files and achieve remote code execution.