2272 matches found
hostingController.txt
Cross-Site Scripting CSS in Hosting Controller All Version and hot fix it hehe ; [email protected] Ashiyane Security Team SegmentationFault Group iam sun-os hehe :P Greetz to : S4P0 - failed - Xsupr3mo - Status-x - Stealh Greetz to : berhooz - nima - ehsan - Mehrtash and...
[SA15654] Macromedia Products Privilege Escalation Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-1788
The CVE-2005-1788 entry describes an SQL injection vulnerability in resellerresources.asp within Hosting Controller 6.1 Hotfix 2.0, exploitable via the jresourceid parameter. Remote attackers can execute arbitrary SQL commands through this input. Affected software/component: Hosting Controller 6....
CVE-2005-1784
CVE-2005-1784 affects Hosting Controller 6.1 HotFix 2.0 and earlier. According to connected sources (Red Hat, CVE lists, and Nessus), a remote attacker can steal passwords and gain privileges by submitting a modified emailaddress parameter in the updateprofile action of UserProfile.asp. The under...
Hosting Controller < 6.1 Hotfix 2.1 Multiple Vulnerabilities
According to its version number, the version of Hosting Controller on the remote host suffers from multiple vulnerabilities: - An authenticated user can modify another user's profile, even an admin's, recover his/her password, and then gain access to the affected application as that user. - An...
Hosting Controller 6.1 - plandetails.asp Information Disclosure
Hosting Controller 6.1 - plandetails.asp Information Disclosure source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks. These...
Hosting Controller 6.1 - 'plandetails.asp' Information Disclosure
source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks. These issues reportedly affect Hosting Controller 6.1 HotFix 2.0 and prio...
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...
Hosting Controller addsubsite.asp Security Bypass
The version of Hosting Controller installed on the remote host does not properly validate access to administrative scripts. An attacker can exploit this flaw to register accounts simply by passing arguments to the 'addsubsite.asp' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066) (uncredentialed check)
The remote host runs a version of Windows that has a flaw in its TCP/IP stack. The flaw may allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host or to perform a denial of service attack against the remote host. Proof of concept code is available to perform a denia...
MS05-016: Vulnerability in Windows Shell (893086)
The remote version of Windows contains a flaw in the Windows Shell that could allow an attacker to elevate his privileges and/or execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to lure a victim into visiting a malicious website or into opening a malicious...
MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944) (uncredentialed check)
The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. Windows XP SP1 can be identified remotely without harm, n...
MailEnable Standard SMTP mailto: Request Format String
The remote host is running a version of MailEnable Standard Edition that suffers from a format string vulnerability in its handling of SMTP commands. Specifically, a remote attacker can crash the SMTP daemon by sending a command with a format specifier as an argument. Due to the nature of the fla...
CVE-2004-1762
Unknown vulnerability in F-Secure Anti-Virus FSAV 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV...
Ipswitch IMail < 8.15 Hotfix 1 IMAP EXAMINE Argument Buffer Overflow
Binary data 2695.prm...
OFF2000: Office Programs Can Browse Restricted Drives (302753)
The remote host is running a version of Microsoft Office that contains a security flaw that could allow a user to browse restricted drives. An attacker could exploit this flaw to gain access to files he would otherwise not have access to. C Tenable Network Security, Inc. include"compat.inc"; if...
MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302) (uncredentialed check)
The remote version of Windows contains a flaw that may allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc"; i...
MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302)
The remote version of Windows contains a flaw that could allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc";...
MS05-008: Vulnerability in Windows Shell (890047)
The remote version of Windows contains a flaw in the Windows Shell that could allow an attacker to elevate his privileges and/or execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to lure a victim into visiting a malicious website or opening a malicious file...