Intellicom NetBiterConfig buffer overflow

Buffer overflow on HMS HICP protocol parsing...

HMS HICP Protocol + Intellicom NetBiterConfig.exe Remote BOF

Exploit for unknown platform in category remote exploits ======================================================================== HMS HICP Protocol + Intellicom NetBiterConfig.exe Remote Buffer Overflow ======================================================================== Title: HMS HICP...

HMS HICP Protocol + Intellicom - NetBiterConfig.exe Remote Buffer Overflow

HMS HICP Protocol + Intellicom - NetBiterConfig.exe Remote Buffer Overflow More info http://reversemode.com/index.php?option=comcontent&task=view&id=65&Itemid=1 ----- 1st PART "HMS HICP Protocol" AFAIK there is no public documentation about this protocol, if not so please let me know and I'll...

HMS HICP Protocol + Intellicom - 'NetBiterConfig.exe' Remote Buffer Overflow

More info http://reversemode.com/index.php?option=comcontent&task=view&id=65&Itemid=1 ----- 1st PART "HMS HICP Protocol" AFAIK there is no public documentation about this protocol, if not so please let me know and I'll repeatedly hit myself with a sharpened stick.All the information presented her...

CVE-2006-1430

Multiple cross-site scripting XSS vulnerabilities in CONTROLzx HMS formerly DRZES 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dedicatedPlanID parameter to dedicatedorder.php, 2 sharedPlanID parameter to sharedorder.php, 3 planid parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CONTROLzx HMS formerly DRZES 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dedicatedPlanID parameter to dedicatedorder.php, 2 sharedPlanID parameter to sharedorder.php, 3 planid parameter to...

CVE-2006-1430

Multiple cross-site scripting XSS vulnerabilities in CONTROLzx HMS formerly DRZES 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 dedicatedPlanID parameter to dedicatedorder.php, 2 sharedPlanID parameter to sharedorder.php, 3 planid parameter to...

CVE-2006-1430

CVE-2006-1430 affects CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script/HTML via specific user input fields: (1) dedicatedPlanID in dedicated_order.php, (2) sharedPla...

CONTROLzx HMS - Hosting Management System vuln.

CONTROLzx HMS - Hosting Management System vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://front.controlzx.com/ affected versions:V.3.3.4 and prior orginal advisory:http://pridels.blogspot.com/2006/03/controlzx-hms-hosting-management.html Vuln. description: CONTROLzx HMS contains...

CONTROLzx Hms 3.3.4 - dedicated_order.php?dedicatedPlanID Cross-Site Scripting

CONTROLzx Hms 3.3.4 - dedicatedorder.php?dedicatedPlanID Cross-Site Scripting source: https://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

CONTROLzx Hms 3.3.4 - 'server_management.php?plan_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

CONTROLzx Hms 3.3.4 - 'dedicated_order.php?dedicatedPlanID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

CONTROLzx Hms 3.3.4 - server_management.php?plan_id Cross-Site Scripting

CONTROLzx Hms 3.3.4 - servermanagement.php?planid Cross-Site Scripting source: https://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

CONTROLzx Hms 3.3.4 - shared_order.php?sharedPlanID Cross-Site Scripting

CONTROLzx Hms 3.3.4 - sharedorder.php?sharedPlanID Cross-Site Scripting source: https://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

CONTROLzx Hms 3.3.4 - 'shared_order.php?sharedPlanID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

CVE-2005-4366

Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL commands via the 1 planid parameter to a domains.php, b viewusage.php, c popaccounts.php, d databases.php, e ftpusers.php, f crons.php, g passdirs.php, h zonefiles.php, i htaccess.php, and j...

CVE-2005-4366

Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL commands via the 1 planid parameter to a domains.php, b viewusage.php, c popaccounts.php, d databases.php, e ftpusers.php, f crons.php, g passdirs.php, h zonefiles.php, i htaccess.php, and j...

CVE-2005-4367

Cross-site scripting XSS vulnerability in registerdomain.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the "Domain Availability" field. NOTE: this issue was later reported to affect CONTROLzx renamed from DRZES 3.3....

CVE-2005-4367

The CVE-2005-4367 entry describes an XSS in DRZES HMS 3.2 (and later CONTROLzx, renamed from DRZES, 3.3.4) via register_domain.php, likely through unspecified search parameters (potentially the Domain Availability field). Affected function is register_domain.php; root cause is improper handling/e...

CVE-2005-4366

CVE-2005-4366 describes multiple SQL injection vulnerabilities in DRZES HMS 3.2. The issues allow remote attackers to execute arbitrary SQL commands via various parameters across several PHP scripts (e.g., plan_id to domains.php, viewusage.php, pop_accounts.php, databases.php, ftp_users.php, cron...