CVE-2004-1857

The exploit describes a directory traversal vulnerability in HP Web JetAdmin via the 'setinclude' parameter in 'setinfo.hts', allowing remote attackers to access files outside the server root. It can be combined with another vulnerability (BID 9971) for arbitrary file upload and potential unauthorized access.

This exploit leverages a command injection vulnerability in HP Web Jetadmin by manipulating the `obj` parameter to execute arbitrary commands via the `httpd:WriteToFile` function. The PoC demonstrates creating a user account by injecting a command into the configuration file.