EUVD-2008-6134

Malware in sbrugna...

EUVD-2006-7038

Malware in sbrugna...

DreamCost HostAdmin 3.0 Index.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16682/info HostAdmin is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

HostAdmin 0 Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information...

Dreamcost HostAdmin 3.1 'index.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in t...

CVE-2008-6164

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2008-6164

The CVE-2008-6164 entry concerns a cross-site scripting (XSS) flaw in DreamCost HostAdmin 3.1.1, exploitable via the page parameter in index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The available sources confirm the affected component and the attack v...

CVE-2008-6164

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2008-6164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

HostAdmin 3.* Remote File Include Vulnerabilities

Dear securityfocus moderator, a bug in HostAdmin that allows to us to occur a Remote File Include on a Remote machin. this bug tested with the Vulnerable Software 3.1.1. A Full Description Can be found in the attached document. Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1....

hostadmin-rfi.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Remote File Include Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?path=Site?...

HostAdmin Cross-Site Scripting Vulnerabilities

Dear securityfocus moderator, a bug in HostAdmin that allows to us to occur a Cross-Site Scripting on a Remote machin. this bug tested with the Vulnerable Software 3.1.1. bug found in the attached document. Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scriptin...

Dreamcost HostAdmin 3.1 - index.php Cross-Site Scripting

Dreamcost HostAdmin 3.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute...

hostadmin-xss.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scripting Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?page=XSS...

Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

CVE-2006-7056

Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...

CVE-2006-7056: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...

CVE-2006-7056

Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...

CVE-2006-7056

CVE-2006-7056 describes multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path parameter to (1) functions.php and (2) members.php. The index.php vector is cov...