Design/Logic Flaw

HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors...

Hardcoded credentials

hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter...

Path traversal

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath aka mount parameter...

CVE-2013-3573

HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors...

CVE-2013-3574

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath aka mount parameter...

CVE-2013-3575

hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter...

CVE-2013-3573

CVE-2013-3573 relates to HP Insight Diagnostics 9.4.0.4710. The connected sources confirm three related issues in the HP Insight Diagnostics web UI: (1) CVE-2013-3573 — Improper Neutralization of Special Elements in Output Used by a Downstream Component, an injection vulnerability in PHP code pat...

CVE-2013-3575

CVE-2013-3575 affects HP Insight Diagnostics 9.4.0.4710; hpdiags/frontend2/help/pageview.php does not properly restrict PHP include/require, enabling an attacker to pull in arbitrary files under hpdiags/frontend2/help/ via the path parameter (remote inclusion). The Red Hat/NVD entries corroborate...

CVE-2013-3574

CVE-2013-3574 is a path traversal vulnerability in HP Insight Diagnostics (hpdiags/frontend2/commands/saveCompareConfig.php) affecting version 9.4.0.4710. The root cause is improper handling of the devicePath parameter, enabling remote attackers to write data to arbitrary files by supplying a ful...

PT-2013-4487

Name of the Vulnerable Software and Affected Versions HP Insight Diagnostics version 9.4.0.4710 Description The issue is related to the improper restriction of PHP include or require statements in the hpdiags/frontend2/help/pageview.php file. This allows remote attackers to include arbitrary .htm...

PT-2013-4485

Name of the Vulnerable Software and Affected Versions HP Insight Diagnostics version 9.4.0.4710 Description The issue allows remote attackers to conduct unspecified injection attacks. Recommendations For HP Insight Diagnostics version 9.4.0.4710, at the moment, there is no information about a new...

PT-2013-4486

Name of the Vulnerable Software and Affected Versions HP Insight Diagnostics version 9.4.0.4710 Description The issue allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath also known as mount parameter in the saveCompareConfig.php file. Thi...

HP Insight Diagnostics 8.20 b2878 multiple vulnerabilities

HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: Environment: Tested on both windows and linux x32 platforms. The installation requires HP Insight...

CVE-2013-3573: Improper Input Validation

HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors...

CVE-2013-3575: Improper Input Validation

hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter...

CVE-2013-3574: Improper Input Validation

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath aka mount parameter...

KLA10188 Multiple vulnerabilities in HP Insight Diagnostics

Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities 1. Improper PHP include restrictions can be exploited via a path parameter; 2. A path...

Three Vulnerabilities Exist in HP's Insight Diagnostics

There are multiple vulnerabilities in HP’s Insight Diagnostics server management tool that could be exploited by an attacker to run code and let them take over an infected computer. There is currently no fix available for the problem. According to an alert from the CERT Coordination Center,...

HP Insight Diagnostics - Remote Code Injection

source: https://www.securityfocus.com/bid/60447/info HP Insight Diagnostics is prone to a remote code-injection vulnerability. An attacker can exploit this vulnerability to inject and execute arbitrary code within the context of the affected application. HP Insight Diagnostics 9.4.0.4710 is...

HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion

source: https://www.securityfocus.com/bid/60449/info HP Insight Diagnostics is prone to a local file include vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary loca...