// Check if uploaded file is a valid Add-On zip file
if (!($list && file_exists($temp_unzip . 'info.php'))) {
	// Remove the temp unzip directory and the temp zip file
	rm_full_dir($temp_unzip);
	if (file_exists($temp_file)) {
		unlink($temp_file);
	}
$admin->print_error($MESSAGE['GENERIC_INVALID_ADDON_FILE']);
}

Description:
This is an Authenticated RCE exploit for WBCE CMS version <= 1.6.3
It will create an infected module .zip file and start a netcat listener.
Once the zip is created, you will have to login to the admin page
to upload and install the module, which will immediately run the shell
Shell taken from: https://github.com/pentestmonkey/php-reverse-shell/tree/master
Usage:
./exploit.sh <lhost> <lport>