This Metasploit module exploits an unauthenticated arbitrary file upload via an insecure POST request in SonLogger. It has been tested on version less than 6.4.1 in Windows 10 Enterprise.
545f476ef86fb917ecc86e9949be038a9cf9a65e922e977dc23171d24166bcd6