Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP Executive Scorecard 目录遍历漏洞
Vulnerability Description
HP Executive Scorecard（IT主管评分卡）是美国惠普（HP）公司的一套IT流程性能管理解决方案。该方案可自动收集IT系统中的数据，形成关键性能指标，并提供评分卡、仪表板、以及IT财务管理等功能。 HP Executive Scorecard 9.40和9.41版本的Content Acceleration Pack (CAP)Web应用程序中存在目录遍历漏洞。远程攻击者可通过上传可执行的文件利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A