CVE-2011-4166
Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - hp-security-alert@hp.com
- Published
- 2011-12-27
- Last modified
- 2024-09-16
- Weaknesses
- CWE-22
Affected products
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
- http://www.zerodayinitiative.com/advisories/ZDI-11-352/