352 matches found
HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected site. As a...
HP System Management Homepage < 2.1.12 Unspecified XSS
The remote host appears to be running HP System Management Homepage SMH, a web-based management interface for ProLiant and Integrity servers. The version of HP SMH installed on the remote host fails to sanitize user input to an unspecified parameter and script before using it to generate dynamic...
CVE-2008-1663
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-1663
HP System Management Homepage (SMH) versions 2.1.10 and 2.1.11 on Linux and Windows are vulnerable to cross-site scripting (XSS) via unspecified vectors, allowing remote attackers to inject arbitrary script/HTML. The underlying issue is an XSS vulnerability in SMH that lacks details about input h...
Linux和windows平台下的HP System Management Homepage (SMH)跨站脚本漏洞
BUGTRAQ ID: 30029 CVE ID：CVE-2008-1663 CNCVE ID：CNCVE-20081663 HP System Management Homepage是HP公司发布的系统管理主页。 HP System Management Homepage不正确处理用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 可联系供应商获得补丁信息：...
[security bulletin] HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01488878 Version: 1 HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin shoul...
HP-UX PHSS_36870 : HP System Management Homepage (SMH) for HP-UX, XSS (HPSBMA02274 SSRT071445 rev.3)
s700800 11.23 HP System Management Homepage A.2.2.6.2 : Potential security vulnerabilities have been identified with HP System Management Homepage SMH for HP-UX. These vulnerabilities could by exploited remotely to allow cross site scripting XSS. %NASLMINLEVEL 70300 C Tenable Network Security, In...
HP-UX PHSS_36869 : HP System Management Homepage (SMH) for HP-UX, XSS (HPSBMA02274 SSRT071445 rev.3)
s700800 11.11 HP System Management Homepage A.2.2.6.2 : Potential security vulnerabilities have been identified with HP System Management Homepage SMH for HP-UX. These vulnerabilities could by exploited remotely to allow cross site scripting XSS. %NASLMINLEVEL 70300 C Tenable Network Security, In...
HP-UX PHSS_36871 : HP System Management Homepage (SMH) for HP-UX, XSS (HPSBMA02274 SSRT071445 rev.3)
s700800 11.31 HP System Management Homepage A.2.2.6.2 : Potential security vulnerabilities have been identified with HP System Management Homepage SMH for HP-UX. These vulnerabilities could by exploited remotely to allow cross site scripting XSS. %NASLMINLEVEL 70300 C Tenable Network Security, In...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in HP System Management Homepage SMH in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
HP System Management Homepage SMH for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for...
CVE-2007-4931
HP System Management Homepage SMH for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for...
[security bulletin] HPSBMA02258 SSRT071470 rev.1 - HP System Management Homepage (SMH) for Windows, Incomplete Update Installation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01164065 Version: 1 HPSBMA02258 SSRT071470 rev.1 - HP System Management Homepage SMH for Windows, Incomplete Update Installation NOTICE: The information in this Security Bulletin should be acted...
Design/Logic Flaw
HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...
CVE-2007-3260
HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...
[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...
HP System Management Homepage privilege escalation
Novell e-directory users have permissions of root group...
CVE-2007-3062
HP System Management Homepage (SMH) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 2.1.2 (Linux and Windows). The vulnerability allows an attacker to inject arbitrary web script or HTML via unspecified vectors to a user’s browser when interacting with SMH web pages...
CVE-2007-3062
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...