CVE-2013-2367

This Metasploit module exploits a remote code execution flaw in HP SiteScope via the opcactivate.vbs script, which is reachable through the APIBSMIntegrationImpl AXIS service. It uses WScript.Shell.run() to execute cmd.exe with user-provided data, achieving RCE on vulnerable systems.

This Metasploit module exploits a code execution flaw in HP SiteScope via the opcactivate.vbs script, which uses WScript.Shell.run() to execute cmd.exe with user-provided data. It leverages a SOAP request to trigger the vulnerability and achieve remote command execution.