3 matches found
CVE-2025-50927
Easy Hosting Control Panel (EHCP ) version 20.04.1.b is vulnerable to a reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function . The root cause is an unfiltered ftpusername parameter, which allows authenticated attackers to inject and execute arbitrary JavaScript. Po...
CVE-2018-6362
Easy Hosting Control Panel EHCP v0.37.12.b has XSS via the domainop action parameter, as demonstrated by reading the PHPSESSID cookie...
EHCP <= 0.22.8 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...