CVE-2010-5291

Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...

Design/Logic Flaw

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

Design/Logic Flaw

Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...

CVE-2010-5292

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

CVE-2010-5291

Affected software: Amberdms Billing System (ABS). Vulnerability: improper handling of login invalidation after detection, i.e., blacklisting is not properly implemented. Root cause: failure to blacklist after failed login attempts. Impact: enables remote attackers to gain access via brute-force a...

CVE-2010-5291

Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...

CVE-2010-5292

Amberdms Billing System (ABS) prior to version 1.4.1, in multi-instance setups, allows local users to read cached data during the cron-triggered services_usage.php run, exposing sensitive information. Affected component is the cache between cron executions; root cause described as reading cache b...

RootPanel SQL Injection

============================================================ RootPanel All versions SQL injection/Account takeover. Discovery: AkaStep and CAMOUFL4G3 Vendor: http://www.rootpanel.ru/ ============================================================ What is RootPanel ? RootPanel is professional hosting...

NetBill Billing System 1.2 CSRF / XSS

Title: ====== NetBill Billing System v1.2 - Multiple Web Vulnerabilites Date: ===== 2012-05-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=560 VL-ID: ===== 560 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

NetBill Billing System v1.2 - Multiple Web Vulnerabilities

Document Title: =============== NetBill Billing System v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=560 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2011-4747

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a crafted CipherSuite list...

CVE-2011-4748

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as...

CVE-2011-4749

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms on certain pages...

Design/Logic Flaw

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as...

Code injection

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a crafted CipherSuite list...

CVE-2011-4749

Affected software: Parallels Plesk Panel 10.3.1_build1013110726.09. The vulnerability is that the billing system’s password field is generated with autocomplete enabled, enabling bypass of authentication by a user with an unattended workstation, as demonstrated on forms under admin/index.php/defa...

AWBS 2.9.2 Blind SQL Injection

AWBS 2.9.2 Blind SQL Injection 0day ============================================================================================= Dork....: inurl:/cart?ca=addother&oid= Date....: 01-16-2011 Author..: ShivX Contact.: shivanxatgmaildotcom Vendor..: http://www.awbs.com Link....:...

AWBS 2.9.2 (cart.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications AWBS 2.9.2 Blind SQL Injection 0day ============================================================================================= Dork....: inurl:/cart?ca=addother&oid= Date....: 01-16-2011 Author..: ShivX Contact.: shivanxatgmaildotcom...

AWBS 2.9.2 - 'cart.php' Blind SQL Injection

AWBS 2.9.2 Blind SQL Injection 0day ============================================================================================= Dork....: inurl:/cart?ca=addother&oid= Date....: 01-16-2011 Author..: ShivX Contact.: shivanxatgmaildotcom Vendor..: http://www.awbs.com Link....:...

Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection

source: https://www.securityfocus.com/bid/45827/info Advanced Webhost Billing System AWBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or...