CVE ID | CVE-2011-4169 |
CVSS SCORE | 9.0, AV:N/AC:L/Au:N/C:P/I:P/A:C |
AFFECTED VENDORS |
Hewlett-Packard |
AFFECTED PRODUCTS |
Managed Printing Administration |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['11957']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The specific flaw exists and is duplicated within the following scripts: \Inetpub\wwwroot\hpmpa\mpl\view\config\imglist\imgselect\Default.asp Input via the img_id parameter to the aforementioned scripts can be manipulated to perform SQL injection. Additionally, directory traversal can be used on this parameter to delete arbitrary files.
|
ADDITIONAL DETAILS |
Hewlett-Packard has issued an update to correct this vulnerability. More details can be found at:
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03128469 |
DISCLOSURE TIMELINE |
|
CREDIT | Andrea Micalizzi aka rgod |