medium5.0Public exploit code
CVE-2013-3575
hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion2013-06-10 · webapps · php · Verified
Impact
hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Insight Diagnostics | Version 9.4.0.4710 |