Over the last few days there have been many articles written about an issue in Microsoft’s Internet Information Services (IIS). This issue allows an attacker to bypass normal security restrictions when uploading a file to a Web application running on a vulnerable version of IIS. This issue could allow an attacker to upload and execute arbitrary code with the privileges of the Web server.
You can read the rest of this Blog here: Metasploit Releases Module for I.I.S. Local File Include Vulnerability.