Easy Hosting Control Panel Code Execution

The vulnerability of the Easy Hosting Control Panel EHCP relates to the lack of measures taken to protect the structure of the web page when processing the “action” parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

EUVD-2018-18365

Malware in sbrugna...

EUVD-2018-18119

Malware in sbrugna...

EUVD-2018-18364

Malware in sbrugna...

EUVD-2018-18366

Malware in sbrugna...

EUVD-2018-18215

Malware in sbrugna...

EUVD-2018-18118

Malware in sbrugna...

EUVD-2007-6147

Malware in sbrugna...

EUVD-2025-28375

Malicious code in bioql PyPI...

CVE-2025-50858: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter...

CVE-2025-50859: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...

CVE-2025-50860: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

CVE-2025-50926

The Easy Hosting Control Panel EHCP version v20.04.1.b is vulnerable to a SQL injection vulnerability. The flaw exists in the List All Email Addresses function, specifically via the id parameter. This vulnerability allows for parameter injection which can lead to an SQL injection attack. As of th...

CVE-2025-50926: Improper Neutralization of Special Elements used in an SQL Command

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

CVE-2025-50928

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function...

CVE-2025-50928

The Easy Hosting Control Panel EHCP version v20.04.1.b is vulnerable to a SQL injection flaw. The root cause is an unfiltered id parameter within the Change Settings function. This vulnerability allows an attacker to perform unauthorized database queries, potentially impacting data confidentialit...

CVE-2025-50928: Improper Neutralization of Special Elements used in an SQL Command

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function...

Easy Hosting Control Panel EHCP security vulnerability

Easy Hosting Control Panel EHCP is a hosting control panel from Easy Hosting Control Panel, Inc. A security vulnerability exists in Easy Hosting Control Panel EHCP version v20.04.1.b, which stems from an unfiltered ftpusername parameter in the List All FTP User Function, which could lead to a...

📄 Easy Hosting Control Panel 20.04.1.b Cross Site Scripting

Easy Hosting Control Panel version 20.04.1.b suffers from a cross site scripting vulnerability in the ftpusername parameter. This enables the attacker to inject malicious JavaScript payloads, leading to session hijacking, redirection to malicious sites, defacement, or other actions performed in t...