106 matches found
Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting
Parallels H-Sphere 3.0.0 P9 and 3.1 P1 contains multiple cross-site scripting vulnerabilities in login.php in webshell4. An attacker can inject arbitrary web script or HTML via the err, errorcode, and login parameters, thus allowing theft of cookie-based authentication credentials and launch of...
VulnCheck KEV: CVE-2022-30777
Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...
EUVD-2008-6435
Malware in sbrugna...
EUVD-2006-3275
Malware in sbrugna...
EUVD-2005-1609
Malware in sbrugna...
EUVD-2012-4928
Malware in sbrugna...
EUVD-2007-2626
Malware in sbrugna...
EUVD-2003-1238
Malware in sbrugna...
EUVD-2022-52601
Malicious code in bioql PyPI...
CVE-2022-30777
Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...
Parallels H-Sphere Cross-Site Scripting Vulnerability
Parallels H-Sphere is a web-hosting automation control panel from Parallels, Inc. It is used for shared web hosting services. Parallels H-Sphere version 3.6.2 contains a cross-site scripting vulnerability that can be exploited by attackers to perform XSS via indexen.php in the parameters...
CVE-2022-30777
Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...
CVE-2022-30777
Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...
CVE-2022-30777
Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...
Design/Logic Flaw
Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...
CVE-2022-30777
Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...
CVE-2022-30777
The CVE-2022-30777 issue affects Parallels H-Sphere 3.6.1713, where a Cross-Site Scripting (XSS) flaw exists in the index_en.php via the 'from' parameter. Exploitation could allow arbitrary script execution in the victim’s browser, potentially leading to session hijacking, defacement, or theft of...
PT-2022-20311
Name of the Vulnerable Software and Affected Versions Parallels H-Sphere versions 3.6.2 through 3.6.1713 Description The issue allows for cross-site scripting XSS attacks via the index en.php file, specifically through a parameter. This type of attack can enable malicious scripts to be injected...
Parallels H-Sphere 跨站脚本漏洞
Parallels H-Sphere is a web-hosting automation control panel from Parallels, Inc. It is used for shared web hosting services. Parallels H-Sphere version 3.6.2 contains a cross-site scripting vulnerability that can be exploited by attackers to perform XSS via indexen.php in the parameters...
