Add module for OSVDB 46578
Add comment with the component version
Use CmdStagerVBS instead of CmdStagerTFTP

By using `php.exe` as stager, the bad characters can be completely
bypassed. This allows the use of the CmdStagerVBS, which should be
working on all supported Windows systems.
Add OSVDB-94038: ZPanel htpasswd Module Username Command Execution
Forgot to randomize the fake pass and remove the payload during testing
Hmmm, one extra ','
Credit
Land #2004 - Use CmdStagerVBS instead of CmdStagerTFTP for hp_sys_mgmt_exec
Land #2003 - Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation
Land #2005, @wchen-r7's exploit for ZPanel htpasswd