4116 matches found
CVE-2015-2845
The cpanel function in gosite.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATHINFO...
CVE-2015-2844
The cpanel function in gosite.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATHINFO...
Command injection
The cpanel function in gosite.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATHINFO...
Command injection
The cpanel function in gosite.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATHINFO...
CVE-2015-2844
The cpanel function in gosite.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATHINFO...
CVE-2015-2844
CVE-2015-2844 affects GoAutoDial GoAdmin CE prior to 3.3-1420434000. The cpanel function in go_site.php processes the PATH_INFO action segment, and unsafely passes it to command execution, enabling remote attackers to run arbitrary commands. Impact: remote code execution with complete system comp...
CVE-2015-2845
The cpanel function in gosite.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATHINFO...
CVE-2015-2845
CVE-2015-2845 affects GoAutoDial GoAdmin CE prior to 3.3-1421902800. The vulnerability arises in the cpanel function in go_site.php: an attacker can craft PATH_INFO via the $type parameter to execute arbitrary commands remotely. This is a command injection vulnerability with high severity (remote...
GoAutoDial CE 3.3-1406088000 - Authentication Bypass Arbitrary File Upload Command Injection
GoAutoDial CE 3.3-1406088000 - Authentication Bypass Arbitrary File Upload Command Injection Affected software: GoAutoDial Affected version: 3.3-1406088000 GoAdmin and previous releases of GoAutodial 3.3 Associated CVEs: CVE-2015-2842, CVE-2015-2843, CVE-2015-2844, CVE-2015-2845 Vendor advisory:...
cPanel 11.18.3/11.21 - 'manpage.html' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28403/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...
cPanel 11.x - scripts2/changeip user Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
cPanel 11.18.3 - List Directories and Folders Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28300/info cPanel is prone to an information-disclosure vulnerability. An attacker can exploit this issue to determine programs that are running on the affected server and to view folders on other sites that are protected...
cPanel 10.8.1 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16482/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script cod...
cPanel 11.x - scripts2/knowlegebase issue Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
Cpanel <= 11.x (Fantastico) LFI Vulnerability (sec bypass)
No description provided by source. Fantastico In all Version Cpanel 11.x = local File Include Must login to :2082 To break the protection modsecurity & safemode: off & Disable functions : all none Vulnerable Code $licensingservers=$fantasticopath . /includes/enclicensingservers.php; if...
cPanel 11.x 'fileop' Parameter Multiple Cross Site Scripting Vulnerabilities
No description provided by source...
SmilieScript <= 1.0 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :SmilieScript = 1.0 Auth Bypass SQL injection Valunrability + Script site :...
Cpanel 10 Select.HTML Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18655/info Cpanel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
cPanel 5/6/7/8/9 dir Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to...
cPanel 11.x - scripts2/listaccts search Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...