Description
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.
References (5)
Core 5
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37280
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2009-48/
Vendor Advisory vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=126393370331959&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1023470
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/37873
Scores
EPSS
0.3157
EPSS Percentile
96.9%
Details
CWE
CWE-22
Status
published
Products (5)
hp/power_manager
4.2.5
hp/power_manager
4.2.6
hp/power_manager
4.2.7
hp/power_manager
4.2.8
hp/power_manager
< 4.2.9
Published
Jan 20, 2010
Tracked Since
Feb 18, 2026