Lucene search
+L

2525 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/21 12:00 a.m.•1 views

CVE-2025-50860: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...

5.4CVSS5.8AI score0.00234EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2025/08/21 12:00 a.m.•122 views

📄 Easy Hosting Control Panel 20.04.1.b Cross Site Scripting

Easy Hosting Control Panel version 20.04.1.b suffers from a cross site scripting vulnerability in the ftpusername parameter. This enables the attacker to inject malicious JavaScript payloads, leading to session hijacking, redirection to malicious sites, defacement, or other actions performed in t...

6.3CVSS6.3AI score0.00198EPSS
SaveExploits2
OSV
OSV
•added 2025/08/19 8:15 p.m.•15 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits2References2
CVE
CVE
•added 2025/08/19 12:00 a.m.•41 views

CVE-2025-50926

The Easy Hosting Control Panel EHCP version v20.04.1.b is vulnerable to a SQL injection vulnerability. The flaw exists in the List All Email Addresses function, specifically via the id parameter. This vulnerability allows for parameter injection which can lead to an SQL injection attack. As of th...

6.5CVSS8.5AI score0.00258EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/19 12:00 a.m.•11 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

8.5AI score0.00258EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/08/19 12:00 a.m.•25 views

CVE-2025-50926

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

0.00258EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•2 views

CVE-2025-50926: Improper Neutralization of Special Elements used in an SQL Command

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2025/08/18 12:00 a.m.•120 views

📄 Easy Hosting Control Panel 20.04.1.b Cross Site Scripting

Easy Hosting Control Panel version 20.04.1.b suffers from multiple reflective cross site scripting vulnerabilities. Exploit Title: Easy Hosting Control Panel EHCP 20.04.1.b - Reflected Cross-Site Scripting in the List MySQL Databases function via action parameter. Date: Aug 18, 2025 Exploit Autho...

6.1CVSS6.5AI score0.00292EPSS
SaveExploits4
Packet Storm
Packet Storm
•added 2025/08/18 12:00 a.m.•130 views

📄 Easy Hosting Control Panel 20.04.1.b SQL Injection

Easy Hosting Control Panel version 20.04.1.b suffers from a remote SQL injection vulnerability in the listdomains function via the arananalan POST parameter. Title: Easy Hosting Control Panel EHCP 20.04.1.b - SQL Injection in the listdomains function via the arananalan POST parameter Description:...

6.5CVSS7.8AI score0.00234EPSS
SaveExploits2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in aog-control-panel (npm)

The package aog-control-panel was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-14620 Malicious code in aog-control-panel (npm)

The package aog-control-panel was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Cvelist
Cvelist
•added 2025/08/13 8:54 p.m.•31 views

CVE-2011-10013 Traq 2.0–2.3 admincp/common.php RCE

Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php...

10CVSS0.02286EPSS
SaveExploits1References6
CVE
CVE
•added 2025/08/13 8:54 p.m.•38 views

CVE-2011-10013

CVE-2011-10013 affects Traq versions 2.0–2.3. The vulnerability resides in admincp/common.php where flawed authorization allows unauthenticated access to admin-only functionality via plugins.php, enabling remote code execution. Documented exploit references exist (e.g., Exploit-DB entries; Metasp...

10CVSS8.6AI score0.02286EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/08/13 8:54 p.m.•15 views

CVE-2011-10013 Traq 2.0–2.3 admincp/common.php RCE

Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php...

10CVSS8.6AI score0.02286EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/08/10 12:15 a.m.•23 views

CVE-2025-50928

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function...

4.8CVSS8.1AI score0.00237EPSS
SaveExploits2References1
NVD
NVD
•added 2025/08/08 6:15 p.m.•20 views

CVE-2025-50928

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function...

4.8CVSS0.00237EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2025/08/08 12:00 a.m.•18 views

Easy Hosting Control Panel EHCP 安全漏洞

Easy Hosting Control Panel EHCP is a hosting control panel from Easy Hosting Control Panel, Inc. A security vulnerability exists in Easy Hosting Control Panel EHCP version v20.04.1.b. The vulnerability stems from an unfiltered id parameter in the Change Settings feature, which could lead to a SQL...

4.8CVSS7.5AI score0.00237EPSS
SaveExploits2References3
CVE
CVE
•added 2025/08/08 12:00 a.m.•38 views

CVE-2025-50928

The Easy Hosting Control Panel EHCP version v20.04.1.b is vulnerable to a SQL injection flaw. The root cause is an unfiltered id parameter within the Change Settings function. This vulnerability allows an attacker to perform unauthorized database queries, potentially impacting data confidentialit...

4.8CVSS7.7AI score0.00237EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/08 12:00 a.m.•23 views

PT-2025-32378

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel EHCP version 20.04.1.b Description The Easy Hosting Control Panel EHCP contains a SQL injection issue via the id parameter in the Change Settings function. Recommendations As a temporary workaround, consider...

4.8CVSS7.8AI score0.00237EPSS
SaveExploits2References7
Vulnrichment
Vulnrichment
•added 2025/08/08 12:00 a.m.•11 views

CVE-2025-50928

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function...

7.7AI score0.00237EPSS
SaveExploits2References2
Rows per page
Query Builder