CVE-2011-4166

CVE-2011-4166 corresponds to a directory traversal vulnerability in HP Managed Printing Administration (MPA) in the MPAUploader.Uploader.1.UploadFiles() function. Affected software is HP MPA before version 2.6.4. The vulnerability permits remote attackers to create arbitrary files by submitting c...

CVE-2011-4167

CVE-2011-4167 : A stack-based buffer overflow in HP Managed Printing Administration (MPAUploader.dll) prior to v2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp. Exploitation was reported against HP MPA before 2.6.4, enab...

CVE-2011-4168

Summary : CVE-2011-4168 affects HP Managed Printing Administration prior to v2.6.4. Affected component : hpmpa/jobDelivery/Default.asp within HP Managed Printing Administration. Root cause / vulnerability type : Directory traversal vulnerability that allows an attacker to influence file creation ...

CVE-2011-4169

HP Managed Printing Administration before 2.6.4 is affected by CVE-2011-4169. The vulnerability arises in the img_id parameter handling within multiple HP MP A scripts (imglist/imgselect, imgmap/bgselect, imgmap/imgselect) where input can be manipulated to perform SQL injection and directory trav...

CVE-2012-5219

HP MPA (Managed Printing Administration) before 2.7.0 is vulnerable to remote security issues. The CVE-2012-5219 entry describes a cross-site scripting (XSS) vulnerability that could allow an attacker to inject arbitrary script/HTML via unspecified vectors (NVD base score 4.3, MEDIUM). The ZDI ad...