CVE-2015-5452

This Metasploit module exploits an unauthenticated SQL injection to add a backdoor user and a command injection vulnerability in Watchguard XCS to achieve remote command execution as the 'nobody' user.

This exploit demonstrates multiple vulnerabilities in Watchguard XCS <=10.0, including unauthenticated SQL injection, command injection, and privilege escalation. It provides proof-of-concept code for each vulnerability, allowing an attacker to gain root access on the target system.