CVE-2016-8523

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

CVE-2016-8523

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

CVE-2016-8523: Improper Neutralization of Special Elements used in a Command

A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found...

HPE Smart Storage Administrator Code Execution (CVE-2016-8523)

A remote code execution vulnerability exists in HPE Smart Storage Administrator. A remote attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable server. Successful exploitation could result in arbitrary code execution in the security context of the process...

HPE Smart Storage Administrator < 2.60.18.0 RCE

The version of HPE Smart Storage Administrator installed on the remote Windows host is prior to 2.60.18.0. It is, therefore, affected by a flaw in function isDirectFileAccess in file ipcelmclient.php due to improper sanitization of user-supplied input to the 'command' variable. An authenticated,...