CVE-2007-6530

This is a Metasploit module exploiting a stack buffer overflow in the XUpload ActiveX control (version 2.1.0.1) included in HP LoadRunner 9.0. It achieves remote code execution by passing an overly long string to the AddFolder method.

This exploit targets a buffer overflow vulnerability in Persits Software XUpload Control via the AddFolder() method. It uses a crafted buffer with a specific EIP overwrite and shellcode to achieve remote code execution, demonstrated by launching calc.exe or binding a shell to port 4444.

This Metasploit module exploits a stack buffer overflow in the XUpload ActiveX control (version 2.1.0.1) included in HP LoadRunner 9.0 via the AddFolder method. It delivers a payload to achieve remote code execution on vulnerable Windows systems.