hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote malicious users to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
hp insight diagnostics 9.4.0.4710 |