[MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability

MajorSecurity 9HostAdmin = 3.1 - Remote File Include Vulnerability ------------------------------------------------------------------------- Software: HostAdmin Version: =3.1 Type: Remote File Include Vulnerability Date: June, 3rd 2006 Vendor: dreamcost Page: http://dreamcost.com Risc: High...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use...

CVE-2006-0791

PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use...

CVE-2006-0791

PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use...

CVE-2006-0791

DreamCost HostAdmin (vulnerable up to 3.1 and earlier) is affected by a PHP remote file inclusion via index.php. The root cause is an uninitialized $path variable used by index.php, allowing an attacker to include arbitrary files. Related records note that the index.php vector is covered by CVE-2...

CVE-2006-0791: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use...

Dreamcost HostAdmin 3.0 - index.php Remote File Inclusion

Dreamcost HostAdmin 3.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/16682/info HostAdmin is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue ...

Dreamcost HostAdmin 3.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/16682/info HostAdmin is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious P...

[Full-disclosure] HostAdmin - Remote Command Execution Vulnerability

======================================================================================= XOR Crew :: Security Advisory 2/11/2006 ======================================================================================= HostAdmin - Remote Command Execution Vulnerability...

ZH2003-23SA (security advisory): HostAdmin Path Disclosure

ZH2003-23SA security advisory: HostAdmin Path Disclosure Published: 12 august 2003 Released: 12 august 2003 Name: HostAdmin Affected Systems: current version Issue: Remote attackers can know the path of the site Author: [email protected] Vendor: http://dreamcost.com/?page=hostadmin Description...

HostAdmin - Full Path Disclosure

HostAdmin - Full Path Disclosure source: https://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information...

HostAdmin - Full Path Disclosure

source: https://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information. http://www.example.com/pathofhostadmin/?page='...