Secunia

HP has issued an update for System Management Homepage. This fixes some vulnerabilities in PHP and Namazu, which can be exploited by malicious people to cause a DoS (Denial of Service), conduct cross-site scripting attacks, or compromise a vulnerable system.

For more information:
SA13481
SA13600

An unspecified cross-site scripting vulnerability has also been reported.

The vulnerability has been reported in versions 2.0.0 through 2.0.2 on the following platforms:
* Microsoft Windows 2000
* Microsoft Windows 2003
* Microsoft Windows Server 2003 x64 Edition
* Microsoft Windows Server 2003 64-bit
* Linux

Solution
Update to version 2.1.0 or later.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Tom Gallagher for reporting the second unspecified cross-site scripting vulnerability.

Changelog
Further details available in Customer Area

Original Advisory
SSRT5998:
http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01212

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area