27 matches found
EUVD-2008-6134
Malware in sbrugna...
EUVD-2006-7038
Malware in sbrugna...
Dreamcost HostAdmin 3.1 'index.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in t...
DreamAccount <= 3.1 (da_path) Remote File Include Vulnerabilities
No description provided by source. Title: DreamAccount = 3.1 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: dreamcost.com URL: http://dreamcost.com ----------------------------------------------------------------- Credits: Discovered...
DreamHost_<=_&&_>_2.3_global_Inj3ct0r/Xss/Local_inc_Multiple_Exploit
No description provided by source. + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com + visit : inj3ct0r.com , inj3ct0r.org , inj3ct0r.net Decided to make a review to DreamHost - Billing Panel Site product: dreamcost.com Version: = && 2.3...
DreamHost 2.3 SQL Injection / RFI / LFI / XSS
================================================= DreamHost 2.3 global inj3ct0r.com Exploit ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...
CVE-2008-6164
Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2008-6164
The CVE-2008-6164 entry concerns a cross-site scripting (XSS) flaw in DreamCost HostAdmin 3.1.1, exploitable via the page parameter in index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The available sources confirm the affected component and the attack v...
CVE-2008-6164
Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
hostadmin-xss.txt
Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scripting Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT discovery.....: Am!r IrIsT contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?page=XSS...
Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...
Dreamcost HostAdmin 3.1 - index.php Cross-Site Scripting
Dreamcost HostAdmin 3.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute...
CVE-2006-7056
Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...
CVE-2006-7056
CVE-2006-7056 describes multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path parameter to (1) functions.php and (2) members.php. The index.php vector is cov...
CVE-2006-7056
Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...
[MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability
MajorSecurity 9HostAdmin = 3.1 - Remote File Include Vulnerability ------------------------------------------------------------------------- Software: HostAdmin Version: =3.1 Type: Remote File Include Vulnerability Date: June, 3rd 2006 Vendor: dreamcost Page: http://dreamcost.com Risc: High...
DreamAccount 3.1 - 'da_path' Remote File Inclusion
Title: DreamAccount = 3.1 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: dreamcost.com URL: http://dreamcost.com ----------------------------------------------------------------- Credits: Discovered by: 'Aesthetico'...
DreamAccount <= 3.1 (da_path) Remote File Include Vulnerabilities
No description provided by source. Title: DreamAccount = 3.1 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: dreamcost.com URL: http://dreamcost.com ----------------------------------------------------------------- Credits: Discovered...
DreamAccount 3.1 - da_path Remote File Inclusion
DreamAccount 3.1 - dapath Remote File Inclusion Title: DreamAccount = 3.1 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: dreamcost.com URL: http://dreamcost.com ----------------------------------------------------------------- Credits...