CVE-2011-4166

This Metasploit module exploits an arbitrary file upload vulnerability in HP Managed Printing Administration 2.6.3 via directory traversal and null byte injection in the MPAUploader.Uploader.1 control. It uploads a malicious ASP file to achieve remote command execution.

This Metasploit module exploits an arbitrary file upload vulnerability in HP Managed Printing Administration 2.6.3 and prior versions via directory traversal and null byte injection in the UploadFiles() function. It achieves remote command execution by uploading a malicious ASP file containing a Base64-encoded executable payload.