Land rapid7#8940, @h00die's second round of desc fixes

One ninja edit along the way as well.

Author: Tod Beardsley

modules/exploits/multi/http/sysaid_rdslogs_file_upload.rb

@@ -17,7 +17,7 @@ def initialize(info = {})
       'Description' => %q{
         This module exploits a file upload vulnerability in SysAid Help Desk v14.3 and v14.4.
         The vulnerability exists in the RdsLogsEntry servlet which accepts unauthenticated
-        file uploads and handles zip file contents in a insecure way. By combining both weaknesses,
+        file uploads and handles zip file contents in an insecure way. By combining both weaknesses,
         a remote attacker can accomplish remote code execution. Note that this will only work if the
         target is running Java 6 or 7 up to 7u25, as Java 7u40 and above introduces a protection
         against null byte injection in file names. This module has been tested successfully on version

modules/exploits/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi.rb

@@ -24,7 +24,7 @@ def initialize(info = {})
           Note: You have the option to use the authentication bypass or not since it requires
           that the server is rebooted. The password reset will render the authentication useless.
           Typically, if an administrator cant login, they will bounce the box. Therefore, this
-          module performs a heart beat request until the box is bounced and then attempts to login
+          module performs a heartbeat request until the box is bounced and then attempts to login
           and to perform the command injection. This module has been tested on version 2.6.1062r1
           of the appliance.
       },

modules/exploits/multi/http/uptime_file_upload_2.rb

@@ -21,7 +21,7 @@ def initialize(info = {})
         which can be exploited by exploits/multi/http/uptime_file_upload_1.rb, but it was mitigated
         by the vendor.
 
-        Although the mitigiation in place will prevent uptime_file_upload_1.rb from working, it
+        Although the mitigation in place will prevent uptime_file_upload_1.rb from working, it
         can still be bypassed and gain privilege escalation, and allows the attacker to upload file
         again, and execute arbitrary commands.
       },

modules/exploits/multi/http/vtiger_php_exec.rb

@@ -14,7 +14,7 @@ def initialize(info = {})
       'Description' => %q{
       vTiger CRM allows an authenticated user to upload files to embed within documents.
       Due to insufficient privileges on the 'files' upload folder, an attacker can upload a PHP
-      script and execute aribtrary PHP code remotely.
+      script and execute arbitrary PHP code remotely.
 
       This module was tested against vTiger CRM v5.4.0 and v5.3.0.
       },

modules/exploits/multi/http/vtiger_soap_upload.rb

@@ -16,7 +16,7 @@ def initialize(info = {})
     super(update_info(info,
       'Name'           => 'vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload',
       'Description'    => %q{
-          vTiger CRM allows an user to bypass authentication when requesting SOAP services.
+          vTiger CRM allows a user to bypass authentication when requesting SOAP services.
           In addition, arbitrary file upload is possible through the AddEmailAttachment SOAP
           service. By combining both vulnerabilities an attacker can upload and execute PHP
           code. This module has been tested successfully on vTiger CRM v5.4.0 over Ubuntu

modules/exploits/multi/http/webpagetest_upload_exec.rb

@@ -14,7 +14,7 @@ def initialize(info={})
       'Description'    => %q{
           This module exploits a vulnerability found in WebPageTest's Upload Feature. By
         default, the resultimage.php file does not verify the user-supplied item before
-        saving it to disk, and then places this item in the web directory accessable by
+        saving it to disk, and then places this item in the web directory accessible by
         remote users.  This flaw can be abused to gain remote code execution.
       },
       'License'        => MSF_LICENSE,

modules/exploits/multi/http/wikka_spam_exec.rb

@@ -14,7 +14,7 @@ def initialize(info={})
       'Description'    => %q{
           This module exploits a vulnerability found in WikkaWiki.  When the spam logging
         feature is enabled, it is possible to inject PHP code into the spam log file via the
-        UserAgent header , and then request it to execute our payload.  There are at least
+        UserAgent header, and then request it to execute our payload.  There are at least
         three different ways to trigger spam protection, this module does so by generating
         10 fake URLs in a comment (by default, the max_new_comment_urls parameter is 6).
 

modules/exploits/multi/http/x7chat2_php_exec.rb

@@ -14,7 +14,7 @@ def initialize(info = {})
       'Name'           => 'X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution',
       'Description'    => %q{
         This module exploits a post-auth vulnerability found in X7 Chat versions
-        2.0.0  up to 2.0.5.1. The vulnerable code exists on lib/message.php, which
+        2.0.0 up to 2.0.5.1. The vulnerable code exists on lib/message.php, which
         uses preg_replace() function with the /e modifier. This allows a remote
         authenticated attacker to execute arbitrary PHP code in the remote machine.
       },

modules/exploits/multi/http/zabbix_script_exec.rb

@@ -14,9 +14,9 @@ def initialize(info={})
       'Description'    => %q{
       ZABBIX allows an administrator to create scripts that will be run on hosts.
       An authenticated attacker can create a script containing a payload, then a host
-      with an IP of 127.0.0.1 and run the abitrary script on the ZABBIX host.
+      with an IP of 127.0.0.1 and run the arbitrary script on the ZABBIX host.
 
-      This module was tested againt Zabbix v2.0.9.
+      This module was tested against Zabbix v2.0.9.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>

modules/exploits/multi/http/zenworks_control_center_upload.rb

@@ -16,7 +16,7 @@ def initialize(info = {})
       'Name'        => 'Novell ZENworks Configuration Management Remote Execution',
       'Description' => %q{
           This module exploits a code execution flaw in Novell ZENworks Configuration
-        Management 10 SP3 and 11 SP2. The vulnerability exists in the ZEnworks Control
+        Management 10 SP3 and 11 SP2. The vulnerability exists in the ZENworks Control
         Center application, allowing an unauthenticated attacker to upload a malicious file
         outside of the TEMP directory and then make a second request that allows for
         arbitrary code execution. This module has been tested successfully on Novell