CVE:CVE-2011-4166
CNNVD:CNNVD-201112-453
HP Managed Printing Administration 2.6.4之前版本存在漏洞。攻击者可利用MPAUploader.Uploader.1.UploadFiles()函数的输入过滤错误通过目录遍历序列创建任意文件。
solution:Upgrade hp managed_printing_administration to a higher version than 2.6.3,and avoid the version (,2.6.3]