critical9.0Public exploit code
CVE-2013-3576
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP System Management Homepage - JustGetSNMPQueue Command Injection (Metasploit)2013-06-24 · remote · windows · Verified
Impact
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | System Management Homepage | All versions |