CVE-2007-2633

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

Directory traversal

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-2633

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-2633

CVE-2007-2633 affects H-Sphere SiteStudio 1.6. The vulnerability is a directory traversal that allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot) in the template parameter. The NVD entry assigns a base score of 10.0 (HIGH) with network attack vector,...

CVE-2007-2633: Undefined Security Weakness

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

H-Sphere Control Panel不安全日志文件权限漏洞

H-Sphere Control Panel是多域名/站点管理控制面板程序。 域名/站点管理不安全日志文件权限问题，本地攻击者可以利用漏洞破坏系统文件，造成拒绝服务或特权提升问题。 目前没有详细漏洞细节提供。 Positive Software H-Sphere 2.4.3 http://www.psoft.net/hsphere2info.html...

CVE-2006-6382

The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6382

CVE-2006-6382 affects Positive Software H-Sphere prior to 2.5.0 RC3. The control panel creates log files in a user’s directory with insecure permissions, enabling local users to append log data to arbitrary files via a symlink attack. The description notes the provenance is from third‑party infor...

CVE-2006-6382

The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6382: Undefined Security Weakness

The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained...

H-Sphere WebShell 2.x - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20532/info H-Sphere WebShell is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in th...

CVE-2006-3278

CVE-2006-3278 is an XSS vulnerability in H-Sphere 2.5.1 Beta 1 and earlier. Triggered via parameters next_template, start, curr_menu_id, and arid in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name, potentially allowing remote attackers to inject arbitrar...

CVE-2006-3278

Cross-site scripting XSS vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nexttemplate, 2 start, 3 currmenuid, and 4 arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html...

CVE-2006-3278: Undefined Security Weakness

Cross-site scripting XSS vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nexttemplate, 2 start, 3 currmenuid, and 4 arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html...

H-Sphere 2.5.1 - Multiple Cross-Site Scripting Vulnerabilities

H-Sphere 2.5.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18677/info H-Sphere is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

H-Sphere 2.5.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18677/info H-Sphere is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in th...

hsphereXSS.txt

I.Vulnerability H-Sphere Hosting Control Panel Cross Site Scripting Vulnerability II.Vendor Positive Software www.psoft.net III.Affected Systems H-Sphere = 2.4.3 Patch 8 IV.About H-Sphere is a scalable multiserver web hosting control panel that provides complete hosting automation for Linux, BSD ...

Cross site scripting

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

CVE-2006-0193

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

CVE-2006-0193

CVE-2006-0193 is an XSS vulnerability in the Hosting Control Panel (psoft.hsphere.CP) of Positive Software H-Sphere, affecting version 2.4.3 Patch 8 and earlier. The issue arises from a flaw in the login action where the login parameter can be exploited to inject arbitrary web script/HTML. The NV...