CVE-2011-0280 Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to Contents...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to Contents/exportlogs.asp, (2) the Id parameter to Contents/pagehelp.asp, or the (3) SORTORD or (4) SORTCOL parameter to Contents/applicationlogs.asp. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc power manager | <= 4.3.2 | No fix listed |
| HP Inc power manager | = 4.2.5 | No fix listed |
| HP Inc power manager | = 4.2.6 | No fix listed |
| HP Inc power manager | = 4.2.7 | No fix listed |
| HP Inc power manager | = 4.2.8 | No fix listed |
| HP Inc power manager | = 4.2.9 | No fix listed |
References
- HPSBMA02629 vendor-advisory
- 43058 third-party-advisory vendor-advisory
- 46830 vdb-entry
- powermanager-unspecified-xss(66035) vdb-entry