CVE-2015-2857

This Metasploit module exploits a command injection vulnerability in Accellion FTA by injecting shell metacharacters into the 'oauth_token' parameter, leading to remote code execution. The exploit targets the '/tws/getStatus' endpoint and confirms vulnerability via a check method.

This Metasploit module exploits a command injection vulnerability in Accellion FTA by injecting shell metacharacters into the 'oauth_token' parameter, which is passed to a system() call. The exploit targets the '/tws/getStatus' endpoint and achieves remote code execution.