CVE-2015-2284

This Metasploit module exploits an authentication bypass and arbitrary file upload vulnerability in SolarWinds Firewall Security Manager 6.6.5, leading to remote code execution as SYSTEM. It abuses session manipulation and file upload functionality to deploy a malicious JSP payload.

This Metasploit module exploits an authentication bypass and file upload vulnerability in SolarWinds Firewall Security Manager 6.6.5 to achieve remote code execution. It leverages session manipulation and malicious JSP upload to execute arbitrary payloads.