CVE-2011-2763

This Metasploit module exploits a command injection vulnerability in LifeSize Room versions 3.5.3 and 4.7.18 via a malicious AMF-encoded POST request to the `LSRoom_Remoting.doCommand` function. It leverages a PHP session to authenticate and execute arbitrary commands.

This Metasploit module exploits a command injection vulnerability in LifeSize Room versions 3.5.3 and 4.7.18 by leveraging a vulnerable resource to inject OS commands via a crafted AMF request. The exploit establishes a session, validates it, and then sends a malicious POST request to execute the payload.