Cross site scripting

Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...

CVE-2006-2617

Affected products: AlstraSoft Web Host Directory 1.2 (aka HyperStop WebHost Directory 1.2). Root cause: an invalid entry in the Username field on the login page can produce an SQL error that reveals the installation path, potentially due to SQL injection. Impact: partial disclosure of installatio...

CVE-2006-2578

CVE-2006-2578 affects eSyndicat Directory 1.2. When register_globals is enabled and magic_quotes_gpc is disabled, a remote attacker can include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the path_to_config parameter. This is a remote code execution risk...