Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2011-0280

Disclosure Date: March 14, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to Contents/exportlogs.asp, (2) the Id parameter to Contents/pagehelp.asp, or the (3) SORTORD or (4) SORTCOL parameter to Contents/applicationlogs.asp. NOTE: some of these details are obtained from third party information.
0
0
Attacker Value
Unknown

CVE-2011-0277

Disclosure Date: February 09, 2011 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.
0
0
Attacker Value
Unknown

CVE-2010-4113

Disclosure Date: December 22, 2010 (last updated October 04, 2023)
Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server.
0
0
Attacker Value
Unknown

CVE-2009-4000

Disclosure Date: January 20, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.
0
0