Spreecommerce Arbitrary Command Execution

This Metasploit module exploits an arbitrary command execution vulnerability in the Spreecommerce API searchlogic. Unvalidated input is called via the Ruby send method allowing command execution.

Source: Spreecommerce Arbitrary Command Execution