EIP-2026-118759

This Metasploit module exploits a SQL injection vulnerability in ManageEngine Security Manager Plus to achieve remote code execution by uploading a malicious JSP file and executing it. The exploit leverages a union-based SQL injection to write a JSP payload to the web root, which then downloads and executes a malicious executable.