CVE-2013-6221

🗓️ 18 Jun 2014 16:00:00Reported by hpType

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, allows remote attackers to create arbitrary files and execute arbitrary code

Reporter	Title	Published	Views	Family All 13
0day.today	HP AutoPass License Server File Upload Exploit	27 Jun 201400:00	–	zdt
Circl	CVE-2013-6221	27 Jun 201400:00	–	circl
Check Point Advisories	HP Service Virtualization AutoPass License Server Directory Traversal (CVE-2013-6221)	10 Aug 201400:00	–	checkpoint_advisories
Cvelist	CVE-2013-6221	18 Jun 201416:00	–	cvelist
Exploit DB	HP AutoPass License Server - Arbitrary File Upload (Metasploit)	27 Jun 201400:00	–	exploitdb
Tenable Nessus	HP AutoPass License Server Remote Code Execution (HPSBMU03045)	27 Jun 201400:00	–	nessus
Metasploit	HP AutoPass License Server File Upload	23 Jun 201414:19	–	metasploit
NVD	CVE-2013-6221	18 Jun 201416:55	–	nvd
Packet Storm	HP AutoPass License Server File Upload	27 Jun 201400:00	–	packetstorm
Prion	Directory traversal	18 Jun 201416:55	–	prion

NVD

Node

hp service_virtualizationMatch3.0

Source	Link
exploit-db	www.exploit-db.com/exploits/33891
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-14-195/
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_traversal.rb
packetstormsecurity	www.packetstormsecurity.com/files/127247/HP-AutoPass-License-Server-File-Upload.html
securitytracker	www.securitytracker.com/id/1030385
osvdb	www.osvdb.org/107943
h20564	www.h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay

Parameter	Position	Path	Description	CWE
uploadedFile	request body	/autopass/cs/pdfupload	Directory traversal/file upload vulnerability in CS endpoint allowing arbitrary file upload via multipart form field uploadedFile.	CWE-22

06 May 2026 22:30Current

7.6High risk

Vulners AI Score7.6

CVSS 210

EPSS0.84144

CWE-22