Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2013-3575
Disclosure Date: June 14, 2013 (last updated October 05, 2023)
hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.
0
Attacker Value
Unknown
CVE-2013-3574
Disclosure Date: June 14, 2013 (last updated October 05, 2023)
Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.
0
Attacker Value
Unknown
CVE-2013-3573
Disclosure Date: June 14, 2013 (last updated October 05, 2023)
HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors.
0
