292 matches found
HP Power Manager 'formExportDataLogs' Buffer Overflow
Exploit for cgi platform in category remote exploits $Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...
HP Power Manager 'formExportDataLogs' Buffer Overflow
This module exploits a buffer overflow in HP Power Manager's 'formExportDataLogs'. By creating a malformed request specifically for the fileName parameter, a stack-based buffer overflow occurs due to a long error message which contains the fileName, which may result in arbitrary remote code...
[security bulletin] HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02950841 Version: 1 HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager SL-APM, Remote User Validation Failure NOTICE: The information in this Security Bulletin should be acted...
HP ProLiant SL Advanced Power Manager unauthorized access
No description provided...
CVE-2011-2405
The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2011-0280
Multiple cross-site scripting XSS vulnerabilities in HP Power Manager HPPM 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the logType parameter to Contents/exportlogs.asp, 2 the Id parameter to Contents/pagehelp.asp, or the 3 SORTORD or 4 SORTCOL parameter t...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in HP Power Manager HPPM 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the logType parameter to Contents/exportlogs.asp, 2 the Id parameter to Contents/pagehelp.asp, or the 3 SORTORD or 4 SORTCOL parameter t...
CVE-2011-0280
Multiple cross-site scripting XSS vulnerabilities in HP Power Manager HPPM 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the logType parameter to Contents/exportlogs.asp, 2 the Id parameter to Contents/pagehelp.asp, or the 3 SORTORD or 4 SORTCOL parameter t...
CVE-2011-0280
CVE-2011-0280 affects HP Power Manager (HPPM)
HP Power Manager Unspecified Cross Site Scripting Vulnerability
The HP Power Manager is prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
HP Power Manager Unspecified Cross Site Scripting Vulnerability
The HP Power Manager is prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may l...
HP Power Manager Administration Web Server Stack Buffer Overflow (CVE-2010-4113)
HP Power Manager is a web-based application for managing a HP Uninterruptible Power System UPS. The web management console allows users to monitor, manage, and control a single UPS locally and remotely. A buffer overflow vulnerability exists within HP Power Manager. The vulnerability is due to a...
HP Power Manager Unspecified Cross-Site Request Forgery
HP Power Manager was detected on the remote host. All versions of this software reportedly have an unspecified cross-site request forgery vulnerability. The application does not attempt to validate user requests before performing them. It makes no distinction between user actions that are perform...
HP Power Manager <= 4.3.2 Multiple Vulnerabilities
HP Power Manager is prone to cross-site request forgery CSRF and cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
HP Power Manager Cross Site Request Forgery (CSRF) and XSS Vulnerability
This host is running HP Power Manager and is prone to cross site request forgery and cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbhppowermanagercsrfvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ HP Power Manager Cross Site Request Forgery CSRF and XSS Vulnerability Authors:...
[security bulletin] HPSBMA02629 SSRT100381 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Cross Site Request Forgery (CSRF)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02711131 Version: 1 HPSBMA02629 SSRT100381 rev.1 - HP Power Manager HPPM Running on Linux and Windows, Cross Site Request Forgery CSRF NOTICE: The information in this Security Bulletin should be...
HP Power Manager crossite request forgery
No description provided...
CVE-2011-0277
Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...
CVE-2011-0277
Cross-site request forgery CSRF vulnerability in HP Power Manager HPPM 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts...