HP Power Manager是基于Web的应用,允许管理员通过基于浏览器的控制台管理HP UPS。 HP Power Manager(HPPM)4.3.2及之前版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助多个参数注入任意web脚本或者HTML。这些参数包括:(1)向Contents/exportlogs.asp传递的logType参数,(2)向Contents/pagehelp.asp传递的Id参数,或者向Contents/applicationlogs.asp传递的(3)SORTORD或(4)
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2011-0432 | Simon_Pamies PyWebDAV多个SQL注入漏洞 | |
| CVE-2011-0700 | WordPress多个跨站脚本攻击漏洞 | |
| CVE-2011-0701 | WordPress媒体上传器wp-admin/async-upload.php敏感信息泄露漏洞 | |
| CVE-2011-1088 | Apache Tomcat '@ServletSecurity'注释安全限制绕过漏洞 | |
| CVE-2011-1091 | Pidgin 安全漏洞 | |
| CVE-2011-1419 | Apache Tomcat '@ServletSecurity'注释安全限制绕过漏洞 |
No comments yet