← Database

CVE-2009-4185

MEDIUM CVSS: 4.3 Published: 2010-02-05 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.

Affected Platforms

Hp System Management Homepage

Weakness Type

CWE-79

References