352 matches found
CVE-2014-7874
CVE-2014-7874 is a CSRF vulnerability affecting HP System Management Homepage (SMH) on HP-UX. It impacts SMH before 3.2.3 on HP-UX B.11.23 and before 3.2.8 on HP-UX B.11.31, potentially allowing remote attackers to hijack user authentication via unknown vectors. HP attributes the issue to CSRF an...
HP System Management Homepage multiple security vulnerabilities
DoS, XSS, CSRF, clickjacking, unauthorized access, information leakage...
[security bulletin] HPSBMU03112 rev.1 - HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04463322 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04463322 Version: 1 HPSBMU03112 rev....
HP System Management Homepage vulnerable to cross-site scripting
Overview HP System Management Homepage versions 7.2.3 and 7.3.2.1 contain a reflected cross site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-2640HP System Management Homepage versions 7.2.3 and 7.3.2.1...
CVE-2014-2642
HP System Management Homepage SMH before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2014-2640
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2641
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Code injection
HP System Management Homepage SMH before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2014-2640
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-2641
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-2642
HP System Management Homepage SMH before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors...
HP System Management Homepage Login Utility
This module attempts to login to HP System Management Homepage using host operating system authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/smh' require...
HP System Management Homepage 7.1.2 Local 权限提升漏洞
No description provided by source...
HP System Management Homepage < 7.2.4.1 / 7.3.3.1 OpenSSL Multiple Vulnerabilities
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server has an implementation of the OpenSSL library that is affected by the following vulnerabilities : - An error exists in the ssl3readbytes function that allows data to be injected...
HPSystem Management Homepage (SMH) <= 2.1.12 - 'message.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the conte...
HP System Management Homepage <= 3.0.2 'servercert' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37968/info HP System Management Homepage, also known as Systems Insight Manager, is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
HP System Management Homepage Local Privilege Escalation
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...
HP System Management Anonymous Access Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
HP System Management Homepage OpenSSL Multiple Vulnerabilities (Heartbleed)
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server has an implementation of the OpenSSL library affected by the following issues : - An error exists in the 'ssl3takemac' function in the file 'ssl/s3both.c' related to handling TLS...