CVE-2011-1540

CriticalCVSS 9.0/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via unknown vectors.

Metrics

CVSS 2.0 9.0/10AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Apr 29, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-154110.0Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, CVE-2011-15424.3Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web scriCVE-2011-15434.3Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentCVE-2011-15446.0Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via uCVE-2011-15456.8Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack thCVE-2011-15467.5Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL coCVE-2011-15476.8Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allowCVE-2011-15486.3The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write aCVE-2011-15496.3The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write accesCVE-2011-15506.3The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root wrCVE-2011-15516.9SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local useCVE-2011-15524.3t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote
CVE-2011-1540: Critical severity, CVSS 9.0 | Vulnix