Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-4166.
PoCs published by Metasploit, Andrea Micalizzi, juan vazquez, including Metasploit module exploits/windows/http/hp_mpa_job_acct.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary file upload vulnerability in HP Managed Printing Administration 2.6.3 via directory traversal and null byte injection in the MPAUploader.Uploader.1 control. It uploads a malicious ASP file to achieve remote command execution.
Description
Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
Exploits (2)
This Metasploit module exploits an arbitrary file upload vulnerability in HP Managed Printing Administration 2.6.3 via directory traversal and null byte injection in the MPAUploader.Uploader.1 control. It uploads a malicious ASP file to achieve remote command execution.
This Metasploit module exploits an arbitrary file upload vulnerability in HP Managed Printing Administration 2.6.3 and prior versions via directory traversal and null byte injection in the UploadFiles() function. It achieves remote command execution by uploading a malicious ASP file containing a Base64-encoded executable payload.