EUVD-2007-4097

Malware in sbrugna...

EUVD-2007-2267

Malware in sbrugna...

EUVD-2008-2896

Malware in sbrugna...

EUVD-2011-0530

Malware in sbrugna...

CVE-2020-25950

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

Awbs Advanced Webhost Billing System Cross-Site Request Forgery Vulnerability

Awbs Advanced Webhost Billing System is a Php-based web billing management system for managed hosting from Awbs USA. The platform provides web hosting and or domain name registration business services, providing an automated solution for web hosting management. A cross-site request forgery...

CVE-2020-25950

Vulnerability summary (CVE-2020-25950) : A CSRF flaw in Advanced Webhost Billing System 3.7.0 can delete a contact via the My Added Contact page. The affected component is the web application logic handling contact management; the root cause is insufficient validation of request origin for state-...

CVE-2020-25950: Cross-Site Request Forgery (CSRF)

Advanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery CSRF attacks that can delete a contact from the My Additional Contact page...

PT-2021-11205

Name of the Vulnerable Software and Affected Versions: Advanced Webhost Billing System version 3.7.0 Description: The issue allows Cross Site Request Forgery CSRF attacks, which can lead to the deletion of a contact from the My Additional Contact page. Recommendations: For Advanced Webhost Billin...

PT-2011-2409

Name of the Vulnerable Software and Affected Versions Advanced Webhost Billing System AWBS versions 2.9.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the oid parameter in an "add other" action in the cart.php file...

CVE-2011-0510: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cart.php in Advanced Webhost Billing System AWBS 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an addother action...

CVE-2008-2903

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

Sql injection

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

CVE-2008-2903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

CVE-2007-4112

Multiple SQL injection vulnerabilities in Advanced Webhost Billing System AWBS before 2.6.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be leveraged for XSS attacks that "bypass AWBS's anti-XSS input validation...

Default configuration

Unspecified vulnerability in Advanced Webhost Billing System AWBS before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors...

CVE-2007-4113

Unspecified vulnerability in Advanced Webhost Billing System AWBS before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors...

CVE-2007-4113: Undefined Security Weakness

Unspecified vulnerability in Advanced Webhost Billing System AWBS before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors...

CVE-2007-4112: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Advanced Webhost Billing System AWBS before 2.6.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be leveraged for XSS attacks that "bypass AWBS's anti-XSS input validation...

CVE-2007-2272: Undefined Security Weakness

PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System AWBS 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter...