305 matches found
CVE-2011-2402
Cross-site scripting XSS vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2403
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Sql injection
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2403
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-2403
CVE-2011-2403 is an SQL injection vulnerability reported for HP Network Automation versions 7.2x, 7.5x, 7.6x, 9.0, and 9.10. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This entry is supported by public references in the NVD entry (CVSSv2...
CVE-2011-2402
Cross-site scripting XSS vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2402
CVE-2011-2402 affects HP Network Automation versions 7.2x, 7.5x, 7.6x, 9.0 and 9.10 with a cross-site scripting (XSS) flaw reported. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Seebug notes that exploitation could enable attackers to o...
CVE-2011-2402: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2403: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
HP Network Automation CVE-2011-2402跨站脚本漏洞
Bugtraq ID: 48922 CVE ID:CVE-2011-2402 HP Network Automation是一款自动化网络配置管理工具。 运行在Linux, Solaris和Windows平台下的HP Network Automation存在安全漏洞,允许攻击者进行跨站脚本攻击,攻击者可以获得敏感信息或劫持用户会话。 HP Network Automation 9.10 HP Network Automation 9.0 HP Network Automation 7.6 HP Network Automation 7.5 HP Network Automation 7.2...
HP Network Automation 9.10 - SQL Injection
HP Network Automation 9.10 - SQL Injection source: https://www.securityfocus.com/bid/48924/info HP Network Automation is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow...
HP Network Automation 9.10 - SQL Injection
source: https://www.securityfocus.com/bid/48924/info HP Network Automation is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...
CVE-2011-1725
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors...
Code injection
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors...
CVE-2011-1725
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors...
CVE-2011-1725
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors...
CVE-2011-1725: Exposure of Sensitive Information to an Unauthorized Actor
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors...
CVE-2011-1725
HP Network Automation (versions 7.2x, 7.5x, 7.6x, 9.0, 9.10) is affected by a remote information disclosure vulnerability (CVE-2011-1725). The security bulletin cites a vulnerability that could be exploited remotely to obtain sensitive information via unspecified vectors and provides a hotfix/upd...