CVE-2013-4835
HP SiteScope 10.1x and 11.x < 11.22 - Unauthenticated Remote Code Execution via APISiteScopeImpl issueSiebelCmd Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-4835.
PoCs published by Metasploit, including Metasploit module exploits/multi/http/hp_sitescope_issuesiebelcmd.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated remote code execution vulnerability in HP SiteScope's APISiteScopeImpl web service via the issueSiebelCmd method. It supports both Windows and Linux targets, delivering payloads through SOAP requests.
Description
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
Exploits (2)
This Metasploit module exploits an unauthenticated remote code execution vulnerability in HP SiteScope's APISiteScopeImpl web service via the issueSiebelCmd method. It supports both Windows and Linux targets, delivering payloads through SOAP requests.
This Metasploit module exploits an unauthenticated remote code execution vulnerability in HP SiteScope's APISiteScopeImpl web service via the issueSiebelCmd method. It supports both Windows and Linux targets, using a SOAP-based command injection technique.