Vulnerability Details CVE-2013-3575
hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.156
EPSS Ranking 94.4%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2013-3575
-
cpe:2.3:a:hp:insight_diagnostics:9.4.0.4710