CVE-2004-1421

Multiple PHP remote file inclusion vulnerabilities 1 stepone.php, 2 steponetables.php, 3 steptwotables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the serverinc parameter to reference a URL on a remote web server that contains the cod...

CVE-2004-1420

WHM AutoPilot 2.4.6.5 and earlier contains multiple XSS flaws in header.php, allowing remote attackers to inject arbitrary script/HTML via site_title or http_images parameters. Affected component is WHM AutoPilot’s header.php; root cause is improper handling of user-supplied values in these param...

CVE-2004-1421

CVE-2004-1421: Affects WHM AutoPilot 2.4.6.5 and earlier. The vulnerability arises from PHP remote file inclusion through the server_inc parameter in 1) step_one.php, 2) step_one_tables.php, and 3) step_two_tables.php, enabling an attacker to reference a URL on a remote server that contains execu...

WHM-autopilot.txt

GulfTech Security Research December 28th, 2004 Vendor : Benchmark Designs, LLC URL : http://www.whmautopilot.com/ Version : WHM AutoPilot v2.4.6.5 && Others All Versions Risk : Multiple Vulnerabilities Description: Started by a webhost looking for more out of a simple managment script, Brandee...

CVE-2004-2524

clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogine and base64encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form...

CVE-2004-1422

WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings...

CVE-2004-1421

Multiple PHP remote file inclusion vulnerabilities 1 stepone.php, 2 steponetables.php, 3 steptwotables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the serverinc parameter to reference a URL on a remote web server that contains the cod...

CVE-2004-1420

Multiple cross-site scripting XSS vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sitetitle or 2 httpimages parameter...

Multiple WHM Autopilot Vulnerabilities

GulfTech Security Research December 28th, 2004 Vendor : Benchmark Designs, LLC URL : http://www.whmautopilot.com/ Version : WHM AutoPilot v2.4.6.5 && Others All Versions Risk : Multiple Vulnerabilities Description: Started by a webhost looking for more out of a simple managment script, Brandee...

WHM AutoPilot < 2.5.20 Multiple Remote Vulnerabilities

The remote web server is running WHM AutoPilot, a script designed to administer a web-hosting environment. The remote version of this software is vulnerable to various flaws that may allow an attacker to execute arbitrary commands on the remote host, obtain information about the remote host's PHP...

[Full-Disclosure] Benchmark Designs&#39; WHM Autopilot backdoor vulnerability to plain-text password.

Subject: Benchmark Designs' WHM Autopilot Probably all versions up to 2.4.5 vulerable to plain-text credential leakage via backdoor. Preamble: Benchmark Designs' WHM Autopilot is a client management system made for webhosts, in order to simplify webhosting business management. It manages CPanel...