EUVD-2008-6134

Malware in sbrugna...

EUVD-2006-7038

Malware in sbrugna...

DreamCost HostAdmin 3.0 Index.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16682/info HostAdmin is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

Dreamcost HostAdmin 3.1 'index.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in t...

HostAdmin 0 Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information...

CVE-2008-6164

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2008-6164

The CVE-2008-6164 entry concerns a cross-site scripting (XSS) flaw in DreamCost HostAdmin 3.1.1, exploitable via the page parameter in index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The available sources confirm the affected component and the attack v...

CVE-2008-6164

Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

HostAdmin 3.* Remote File Include Vulnerabilities

Dear securityfocus moderator, a bug in HostAdmin that allows to us to occur a Remote File Include on a Remote machin. this bug tested with the Vulnerable Software 3.1.1. A Full Description Can be found in the attached document. Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1....

hostadmin-rfi.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Remote File Include Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?path=Site?...

HostAdmin Cross-Site Scripting Vulnerabilities

Dear securityfocus moderator, a bug in HostAdmin that allows to us to occur a Cross-Site Scripting on a Remote machin. this bug tested with the Vulnerable Software 3.1.1. bug found in the attached document. Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scriptin...

hostadmin-xss.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scripting Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?page=XSS...

Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

Dreamcost HostAdmin 3.1 - index.php Cross-Site Scripting

Dreamcost HostAdmin 3.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31538/info Dreamcost HostAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute...

CVE-2006-7056

Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...

CVE-2006-7056

CVE-2006-7056 describes multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path parameter to (1) functions.php and (2) members.php. The index.php vector is cov...

CVE-2006-7056

Multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 functions.php and 2 members.php. NOTE: the index.php vector is covered by CVE-2006-0791...

[MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability

MajorSecurity 9HostAdmin = 3.1 - Remote File Include Vulnerability ------------------------------------------------------------------------- Software: HostAdmin Version: =3.1 Type: Remote File Include Vulnerability Date: June, 3rd 2006 Vendor: dreamcost Page: http://dreamcost.com Risc: High...

CVE-2006-0791

PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use...