CVE-2015-7901

This Metasploit module exploits a command injection vulnerability in Infinite Automation Mango Automation by authenticating as a user and sending a maliciously crafted POST request to execute arbitrary commands via the `testProcessCommand` method.

The exploit demonstrates a CSRF-based file upload vulnerability in Mango Automation 2.6.0, allowing arbitrary JSP code execution by uploading a malicious JSP file via the 'graphicalViewsBackgroundUpload' endpoint. It also includes a CSRF exploit for arbitrary command execution and details for SQL injection and debug log exposure.