What's strange is that if the stars align, like if the system has been "used" enough, the exploit is incredibly reliable. Maybe my test environment is bonkers.
tmshCmd.jsp is extremely unreliable!