metasploit module reference to the ofc upload vuln