CVE-2012-3261

This Metasploit module exploits an authentication bypass (CVE-2012-3260) and arbitrary file upload (CVE-2012-3261) in HP SiteScope 11.20 to achieve remote code execution via a malicious JSP payload. It creates a user with empty credentials, authenticates, and uploads a JSP that decodes and executes a hex-encoded payload.