CVE-2006-1235: Undefined Security Weakness

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories possibly only empty directories via the $deleteuser variable. NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue;...

CVE-2006-1144

Cross-site scripting XSS vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via 1 the user parameter in deleteuser.php and 2 the hits parameter in viewuser.php...

CVE-2006-1144

CVE-2006-1144 concerns HitHost 1.0.0 and is an XSS vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via two parameters: (1) user in deleteuser.php and (2) hits in viewuser.php. The NVD entry lists a low base score (CVSS v2: 2.6, AV:N/AC:H/Au:N/I:P/A:N) with ...

CVE-2006-1144

Cross-site scripting XSS vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via 1 the user parameter in deleteuser.php and 2 the hits parameter in viewuser.php...

CVE-2006-1144: Undefined Security Weakness

Cross-site scripting XSS vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via 1 the user parameter in deleteuser.php and 2 the hits parameter in viewuser.php...

HitHost 1.0 - deleteuser.php?user Cross-Site Scripting

HitHost 1.0 - deleteuser.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/17025/info HitHost is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...