← Database

CVE-2009-4000

CRITICAL CVSS: 10.0 Published: 2010-01-20 Modified: 2026-06-16

Description

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.

Affected Platforms

Hp Power Manager

Weakness Type

CWE-22

References