EUVD-2006-1411

Malware in sbrugna...

CVE-2006-5984

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the 1 txtCompanyName, 2 txtEmail, or 3 txtUserAccNum parameter to a users.asp, or the 4 setThemeColour parameter to b default.asp ...

CVE-2006-5984

Helm Web Hosting Control Panel 3.2.10 is affected by CVE-2006-5984: multiple XSS weaknesses in the Admin, Reseller, and User levels. The vectors include user input in (1) txtCompanyName, (2) txtEmail, (3) txtUserAccNum to users.asp; (4) setThemeColour to default.asp (Reseller/Admin) and (5) setTh...

CVE-2006-1407

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...

CVE-2006-1407

CVE-2006-1407 concerns multiple cross-site scripting (XSS) flaws in Helm Web Hosting Control Panel 3.2.10 and earlier. The affected components are domains.asp (txtDomainName) and default.asp (SearchText, UserLevel) where user-controlled inputs can inject arbitrary script/HTML. The practical impac...

CVE-2006-1407

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...

Helm Web Hosting Control Panel XSS vuln.

Helm Web Hosting Control Panel XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.webhostautomation.com/ affected versions:3.2.10 and prior orginal advisory: http://pridels.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html Vuln. description: Helm Web Hosting...

[Hat-Squad] SQL injection and XSS Vulnerabilities in HELM

Hat-Squad Advisory: SQL injection and XSS Vulnerabilities in HELM November 2, 2004 Product: HELM Web Hosting Control Panel Vendor URL: http://helm.webhostautomation.com Version: HELM 3.1.19 and lower Vulnerability: SQL injection and XSS Release Date: November 2, 2004 Vendor Status: Informed on 28...