NFRAgentexe, a component of Novell File Reporter (NFR), allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130 This Metasploit module has been tested successfully against NFR Agent 1043 (File Reporter 102) and NFR Agent 10322 (File Reporter 101) ...