Description
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.
References
- 37280 third-party-advisory
- http://secunia.com/secunia_research/2009-48/
- HPSBMA02485 vendor-advisory
- 1023470 vdb-entry
- 37873 vdb-entry