CVE-2013-4837
HP LoadRunner < 11.52 - Remote Code Execution in Virtual User Generator
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-4837.
PoCs published by Metasploit, including Metasploit module exploits/windows/http/hp_loadrunner_copyfiletoserver.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in HP LoadRunner 11.52's EmulationAdmin web service to upload and execute arbitrary JSP payloads, achieving remote code execution.
Description
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in HP LoadRunner 11.52's EmulationAdmin web service to upload and execute arbitrary JSP payloads, achieving remote code execution.
This Metasploit module exploits a directory traversal vulnerability in HP LoadRunner 11.52 via the EmulationAdmin web service's copyFileToServer method to upload and execute a JSP payload, achieving remote code execution.