Description
Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.
References
- 38341 third-party-advisory
- 38081 vdb-entry
- SSRT090220 vendor-advisory
- http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-15
- 1023541 vdb-entry
- ADV-2010-0294 vdb-entry
- 20100127 PR09-15: XSS injection vulnerability within HP System Management Homepage (Insight Manager) mailing-list